The part that decides whether an agentic feature ships: does it hold when a real user pushes on it. Build the thing, break it, find at the code level why it broke, fix it. What holds is structural. A control the model cannot talk its way past. What doesn’t is a sentence in a prompt. Reliability lives in the code, not the persona.