Trust Is an Output, Not an Input

An agent skipped the one invariant that would have caught the bug in thirty seconds. The honest diagnosis was not 'the agent forgot' — it was that the rule was prose, and prose never binds. This is the story of turning that failure into a falsifiable mechanism: a Statement of Work (the terms you own) and a Work Order (the execution it can't edit), where 'done' carries the validator's output instead of the agent's word.