The missing piece in your architecture is verification. Funds won't hand execution to an agent they can't audit cryptographically. That's the layer that has to exist before any of this scales; and it doesn't yet. Or does it?