Strong governance before deployment prevents chaos but may prevent learning what agents actually need. Deploy first and you discover real requirements, but risk uncontrolled sprawl. Capabilities evolve faster than frameworks. When's the right moment to establish guardrails that won't immediately become obsolete?