If the risk lives in permissions, memory, tools and what agents decide to do on their own, security must be part of how the thing gets built.