Prompt rules couldn’t stop a phone agent from confirming messages it never sent. Emre Benian makes the case for letting the model propose and a workflow act, backed by test results from moving dates, identity checks, and receipts into code.