My unattended agent runs kept dying silently, and it took me too long to realize a permission prompt was the culprit: the process waits forever instead of failing loudly. Now I treat every headless run as needing an explicit permission mode, set up front, before I trust it in CI. If a tool can block on a human, that's a hang in any script, so I design for that assumption from the start.