An AI agent proposes. A deterministic policy engine decides. Monad keeps the record — including of what was refused.
Who is this agent, and what may it do?
Policy SalesAgent v3. Anything not on the granted list is refused, including actions nobody has thought of yet.
The model never reaches the action layer. It produces a structured intent and stops; every gate after that is deterministic, and the default at the bottom is refusal.