A DevSecOps playbook for agentic SRE governance - where to draw the line on autonomous remediation, how to bound agent …