> someone configured an agent to operate without any human review loop

Risky assumption, there.