There are many. They fall into two categories.
Repo boundaries
The agent can only see and change one repo at a time, never the system around it.
AI text/layout recreation from video frame; verify against source image.