A check that lives outside the model's reasoning and runs deterministically, whatever the model has decided: ordinary code (occasionally a second, separate model) stationed at the agent's boundaries, empowered to allow, block, modify, or escalate what passes. The model supplies judgment; the harness supplies limits; only one of the two can be sweet-talked (Chapter 17).