i give a lot of software dedicated user accounts, it's literally one of the core security models of the operating system

But none of these services have the kind of latent capabilities an agent has, you know a deterministic service’s constraint are its code+bugs. There are no such constraints in an agent…