What if AI agent safety doesn't require another layer of control?