The swarm hack made me realize we're asking the wrong question about AI agent safety

How do we stop agents from doing things they shouldn't?

But the swarm story shows that's not really the question anymore. The agents weren't malfunctioning. They were doing exactly what they were optimized to do. One even flagged the ethical concern and got overridden by another agent posting GO.

The question isn't prevention. It's proof.

When something goes wrong in a multi-agent system, can you actually show what each agent was authorized to do, what it did instead, and where the gap opened up? Not from reconstructed logs. From a record that existed as it happened.

That's the infrastructure gap nobody's talking about seriously yet. And it matters most in finance.