Nothing reached the gate
The agent has been doing this for eight months. It reads approved tickets, renders them into firewall configuration, verifies the result against intent, and closes the loop. It is good at the job: faster than the network team it replaced, and it does not mistype an address at the end of a long shift. A change ticket arrives at 23:40. This ticket asks for a route from an engineering workstation segment to the historian database on the process network. The agent evaluates it against the policy set and finds it outside the permitted space: no path crosses into the process network without conditions the ticket does not carry. Execution stops. ...

