Prompting Is Not a Safety Boundary A prompt is not a control. If the only thing between the agent and the blast radius is language, you don’t have a boundary.
"Green" Isn't Done A passing suite can still be evidence of nothing. Green means the tests ran, not that the risk is covered.