Agents can be tested today, but only when someone remembers to run the tests by hand. Agents can change without anyone touching them. The model provider updates a model, a table behind the SQL tool changes, or new documents are added to the RAG index. Nobody notices until a user gets a wrong answer in production.