Why AI agent teams are just hoping their agents behave

I'm 19, studying computer engineering in Brazil. A few weeks ago I was testing an AI agent with no restrictions. Just to see what it would do. It was destructive. Nothing permanent, I caught it. But it was the kind of moment where you sit back and think: what if I hadn't been watching? What if this was running in production? What if someone else's agent is doing this right now and nobody is watching? That's when I realized the problem. Everyone is racing to give agents tools, autonomy, access. But nobody is building the layer that controls what they can actually do with it.