Business logic stored in employee heads, PDFs, and Slack threads is logic the model cannot enforce. The fix is not better prompts. It is structured rules — decision tables, rule engines, policy-as-code — that the agent calls instead of guesses at.