Read-only investigating agents that score their own confidence before a human ever gets involved is the right shape for this problem. Same philosophy behind FlowTux — it indexes the codebase so it can reason about root cause with real context, but execution is constrained to a fixed command allow-list rather than open-ended access, so a wrong hypothesis can't turn into a bad action.