We showed an agent a real deny in production terms — not a policy doc, the actual evaluator, live. tomkornblit.substack.com/p/we-gave-an-agent-write-access-to