Human-in-the-Loop Remediation

An AI ops agent's real permissions design is two Istio policies and one ClusterRole

An agent that can read Prometheus and reach nothing else is a pattern worth copying. The auto-remediate button in the same dashboard is where the argument gets complicated.