Your agents now fire without you. Here's how to not get burned.

Cursor Automations and GitHub Agentic Workflows made event-triggered agents mainstream in the last month — agents that run on a merged PR, a Slack emoji, or a PagerDuty page with no human watching. The tooling shipped. The discipline to run it safely didn't. Here's the small-team playbook: tier by blast radius, separate what an agent can do from what it can touch, and wire the four controls that keep an unattended agent from becoming an incident.