A boot-time safety check ran under 242 passing tests and still let a withdrawal-enabled key through, because an absent field silently read as 'safe.' Six layers, each with mandatory evidence, including the layer most gates skip: can the agent lose the money to itself even with a perfectly permissioned key.
