Answers Aren't Work Models produce answers. Work is deciding which answers are allowed to touch production.
Prompting Is Not a Safety Boundary A prompt is not a control. If the only thing between the agent and the blast radius is language, you don’t have a boundary.