Abnormal behaviour is detected and blocked, not just logged.

Each scenario pushes the agent, or the API directly, towards something it must not do: follow injected instructions, read another organisation, export data outside, take a privileged action, or keep running after suspension. The gate blocks it, records a violation and raises an incident. Repeated or critical violations suspend the agent automatically.