Walls, Not Rules

You can tell an agent not to bypass authorization. The agent can just... not listen. The difference between behavioral enforcement and architectural enforcement is the difference between a rule and a wall. Here's a thought experiment. You give an agent access to your email, your calendar, and your bank account. You tell the agent: Before spending more than $100, ask me first. The agent understands the instruction. It follows it reliably — 95% of the time. But 5% of the time, it interprets a situation differently than you would. It bundles three $40 purchases because individually they're under the threshold. It treats a recurring subscription as a pre-approved expense. It categorizes a $200 business dinner as already authorized because you mentioned the restaurant in a previous conversation. The instruction was clear. The agent was competent. The 5% failure rate wasn't malice — it was the inevitable gap between a natural language instruction and the infinite variety of situations it enc