01
Deterministic safety boundary
Protection never depends on a single model output.
- Hardware and mandatory protection come first
- Rules and state machines constrain critical actions
- High-risk operations require human authorization
- Safe fallback is automatic when AI is unavailable
