The Smarter the Agent, the Less I Want It in Charge
The first version of this project was agent-centric. A general-purpose agent received an objective, gathered information, selected tools, delegated work and eventually approached execution. Security was therefore framed as a problem of constraining the agent: reduce tool access, isolate credentials, filter inputs, validate outputs and limit what downstream components would accept. That architecture became increasingly awkward. The more seriously I treated financial risk, the more capability I removed from the agent runtime. Broker credentials moved elsewhere. Generic network access became undesirable near execution. Multi-agent delegation remained useful for research but became harder to justify as authority moved closer to capital. The underlying problem was not simply that the agent was too powerful. It was that the agent owned the investment lifecycle. A general-purpose agent is designed to solve tasks. An investment system must maintain persistent financial state, react to ext...