I love how despite all this, the author still uses the language:

> We’re simply not there yet to let the agents run loose

As if there aren’t fundamental properties that would need to change to ever become secure.

Personally, if I could run capable-enough inference on hardware I control, and could rely on the harness asking me for mechanistic confirmation before the agent can take consequential actions, I'd do it immediately.