What if AI agent safety doesn't require another layer of control?

I’m working with a system that made me ask an uncomfortable question:

Does an AI agent always need a separate safety runtime?

I’m not claiming the answer is no.

I’m more interested in finding the point where logic alone genuinely stops being enough.

If you work with AI agents and know a scenario that, in your view, necessarily requires a separate runtime control layer, I’d be interested to hear it. I’ll try to run it through the system.