AI Agents Should Propose Infrastructure, Not Mutate It

Why agents holding cloud credentials undo a decade of infrastructure-as-code — and a design that keeps agent speed while putting a policy-checked gate between intent and effect.