[dist-epoch]

> How do you safely limit what an agent can do

You can go the other way and implement snapshots/backups/history/gmail-unsend everywhere.

DoltDB is such an example, git for MySQL.