You cannot have meaningful autonomy without meaningful governance.
The agents that work best in production are the ones operating inside repos with strong contracts, comprehensive tests, and explicit acceptance criteria. A repo with 95% test coverage, typed API contracts, and deterministic CI gates can safely auto-merge agent PRs. One without those cannot. The governance infrastructure is what makes autonomy safe.
Invest in the harness. The autonomy follows.