A BAA and SOC 2 ruled out Cursor and most agentic tooling, so I wrote the missing layer: four
tiers, a Python state machine owning control flow, hard context resets, tier-based model
routing, evals at the boundaries. Autonomy was never the goal. Being able to see where it went
wrong, while it still mattered, was.
