“If your system cannot infer what it is allowed to decide before acting, you do not have an agent — you have a liability amplifier.”