With traditional software you at least have a binary you can inspect. Here the "program" is a generated Rust module that may never exist again in the same form. That's a genuinely hard problem for any use case where you need to reproduce or explain behavior after the fact.

The community agent store helps for sharing, but it also raises the question: when a downloaded agent does something wrong, who's responsible and how do you trace it? This feels like the unsexy infrastructure problem that'll define whether Pneuma can be trusted for anything beyond personal use.