Researchers Argue Agent Safety Belongs at Runtime, Not in the Training Run · Polylog