The Fail-Closed Harness: Why a Safe Agent's Default Is Refusal

While I was writing this guide, my own harness kept refusing me. The first refusal came when I tried to create a file. A gate intercepted the write and would not pass it until I had stated, on the rec