Don't Give AI Agents Root. Make Them Propose the Next System State.
CNCF, Thursday, October 8th, 2026
A CNCF ambassador argues agents should change systems through immutable, reviewable state proposals, not root access.
CNCF ambassador Mauro Morales argues that giving AI agents root on production machines and relying on an AGENTS.md file to prevent disaster is self-deception, since agents are nondeterministic and the real issue is reproducibility.
Containers and immutable operating systems have already narrowed the host's role to booting reliably and running the platform.
Agents should therefore work through source control, review, CI, signed images and deployment, proposing the next system state rather than mutating machines, with the same rule against unrestricted root applying to humans.