That “rug yourself out” test is the useful one. If keys, state, and balances can’t survive a hostile export drill, it’s not an agent stack — it’s SaaS in a trench coat.