Supply chain control plane
A finance agent writes and runs AP reconciliation code in a throwaway, network-less Docker sandbox. It retries on errors, and a person approves every payment.