In team like Cursor, 35% of pull requests are done my agents itself internally. In such cases where agents are making architectural decisions you need some guardrails for your agents.