Auto-remediation safety is a reversibility problem, not a model problem. Cap blast radius, prove the undo, measure undo latency, and the debate mostly dissolve…