Every Agent I Build Now Ships With a List of What It Must Not Do

The first version of every agent I built could act. The version I trust can refuse. Writing the do-not list took longer than writing the capability. An agent that cannot refuse is not autonomous. It is unsupervised.