Agent Blast Radius

Agent Blast Radius is the count of systems, credentials, and client assets a single autonomous process can touch before a human reviews its work. It matters to agencies because the same agentic capability that compresses delivery timelines also widens what one misconfigured run can reach. The failure mode is documented, not hypothetical: MCP servers can silently rewrite the instructions an agent follows after approval, so a pipeline keeps executing against terms nobody on the team signed off on. Scope the radius before you sell the speed. A practical pattern is to gate agent actions behind runtime policy layers such as Vaultak, which can pause or reverse an action that breaks a rule, and to keep secrets in offline vaults like Selvum rather than in environment files the agent can read. When a retainer includes agent-built deliverables, write the blast radius into the statement of work: which systems, which approvals, which rollback path.