A practical, production-focused security checklist for autonomous/agentic systems: trust tiers, prompt-injection defenses, tool permissions, secrets handling, audit logs, and safe escalation patterns.