Four sessions replayed from the labs' own recorded output: the ReAct loop turn by turn, four guardrails against one payload, an eval case that clears its threshold at 0.74, and a hook that refuses a refund the model already decided to issue.