Safety-by-design

Runtime enforcement is already too late: it catches a failure after the AI has acted — the most expensive place to look and the latest possible place to fix anything.

Safety can't be bolted onto the edge while the system runs. It has to be reasoned through before deployment, when changing the design still costs nothing.