Firestore security rules are not filters
Firestore security rules reject a query, they never narrow it. Why a scoped list throws, four predicates worth reusing, and what a membership check costs.
Autonomy is a dial, not a switch
AI agent autonomy isn’t on or off. Four positions on the dial, the reversibility test that decides which one you need, and what each level costs.