Traditional security assumes a human at the keyboard. Autonomous agents break that assumption. Kastra restores it — every action is authorized, scoped, and logged.