Autonomous agents need self-protection to stay useful, but those same mechanisms can create shutdown resistance. The answer is bounded, replaceable agency.