Adjacent systems answer permitted. We answer intended.

Policy engines answer whether an action is permitted. Guardrails answer whether the output looks safe. Observability answers what happened. None of them answer whether the action matched what was intended in this context. That is the gap.

The four principles.

If verification fails, nothing ran.

The contract is enforceable because the connector verifies the token, not Intended. If the token is missing, malformed, expired, or reused, the gate refuses. There is no silent allow path.