To an agent reading a UI, "Delete database" and "Download report" look equally clickable. Same rectangle, same cursor, same click. Nothing in the interface tells the agent that one action is harmless and the other is catastrophic. Humans have instincts about consequences. We hesitate before the red button. We double-check before wiping something. Agents have no such instinct — they act on patterns, not consequences. That's the real problem with giving agents raw access to your tools and...