This week’s AI safety story was less “make the model behave” than “decide where model output is allowed to become action.”