We had an agent get stuck in a loop hammering a vendor API, and it took twenty minutes to figure out who could kill it — the vendor, our platform team, or the model provider. Nobody had clear authority. As agents get more autonomous, this ambiguity becomes a real safety gap. How are teams designing kill-switches and escalation paths, and is anyone standardizing this?