https://howtonotcode.com/story/2483-agent-security-shifts-from-alerts-to-runtime-enforcement