The public library moves agent action constraints into runtime protocols; its single airline-domain result is useful but not evidence of general reliability.
Next stepWithin one day, replay confirmation-bypass cases and measure violations, task success and recovery consistency.