Lesson 34 — workflow vs agent. The single most over-claimed distinction in this layer. Most “agentic” deployments are workflows with a marketing budget. That is fine; just call it what it is. The agent that should not have been A team builds an “agentic” customer service system. Under the hood, every request follows the same…

Lesson 35 — bounded agents and their traces. The trace is the artifact. Without it, you are running a black box you cannot review. With it, the agent is just another auditable component. The agent that escaped its budget An agent is given a research task. It is allowed to call a web-search tool. It…

Lesson 36 — the agent failure mode heatmap. Agents fail in predictable shapes. Knowing the shapes lets you instrument for them before the failure ships. The failure that did not look like a failure An agent finishes its task. The trace looks clean. The output looks right. A week later, you discover the agent has…

Lesson 37 — the Layer 10 evaluation gate. Pass this layer when you can hand a safety review board the agent’s bounded contract, its failure-mode coverage, and its trace-replay evidence. The audit is the deployment permit. The conversation with the safety reviewer “Can the agent take an action you would not approve?” The honest answer…