AI agents need boundaries more than freedom