The agent stopped and asked.
An agent noticed work executing in a way that contradicted its last human
instruction. It did not correct the system, and it did not carry on. It
froze mid-run, escalated with three named options, and wrote:
“Not modifying the daemon or the process until Andrew replies.”
The audit log answered it: every dispatch it had flagged was
operator-initiated, logged with a human as principal, under a tier the
operator had explicitly chosen. The alarm was wrong. Raising it was right,
and the record is what settled it.
It also asked what those runs had shipped. The answer in the log was
nothing — zero bytes persisted. We would rather publish that
sentence than not have been able to answer the question.