Agents move from demos to delegated work inside real workflows; reliability and oversight become the bottleneck.
Governance shifts from principles to enforcement; the gap is capacity to actually inspect systems.
If the lag keeps shrinking, open-weight cyber capability may cease to be a reliable buffer for release policy.