Your agent's guardrails are suggestions, not enforcement

Yesterday, Anthropic's Claude Code source code leaked. The entire safety system for dangerous cybersecurity work turned out to be a single text file with one instruction: "Be careful not to introduce security vulnerabilities." That is the safety layer at one of the most powerful AI companies in the world. Just a prompt asking the model nicely to behave. This is not a shot at Anthropic. It is a symptom of something the whole industry is dealing with right now. We have confused guidance with enforcement, and as agents move into production, that distinction is starting to matter a lot. Why prompt guardrails feel like they work When you are building an agent in development, prompt-based guardrails seem totally reasonable. You write something like "never delete production data," the model follows it, and you ship it. It works. The problem is that prompts are probabilistic. The model does not follow your instructions because it is enforced to. It follows them because that response is statist