An inbox is useful, but the real unlock is the evidence trail around each run. If an agent can read, write, retry, and file issues in the background, every action needs replayable receipts: what it saw, which permissions it used, and why it changed state. Otherwise “autonomous” just means harder to audit.