Having strong sandboxing and observability around the models is clearly a hard requirement if you want to run these things autonomously.