NT isn't the answer for AI agents either. It runs on ambient authority just like Unix, and it's got its own pile of bolt-ons (UAC, integrity levels, AppContainer). If the question is "what exactly can this agent touch," you want capabilities: seL4, Fuchsia, Capsicum.