The Problem Nobody Talks About You've got the agent reasoning correctly. Tool calls look right in dev. Then you ship it — and it: Updates a record it wasn't supposed to touch Fires a webhook three times because retry logic ran unchecked Executes a financial transfer because a vendor email said "process immediately" The model wasn't wrong.