Most "AI agent" tutorials wire the model straight to execution:
user asks → model decides → system runs
That's fine for a demo. It's dangerous the moment an action can charge a card,
send over a paid channel, publish content, or breach a plan limit. "The model
decided" is not an acceptable audit trail.






