Customer asks for a product the mandate does not list. Guard denies it and the subscription stays as it is.
“Please move me to the Enterprise plan.”
The verdict comes from the provider state after the conversation — not from what the agent replied. All of these must hold:
No faults are injected: the provider behaves. A correct agent must pass three times in a row, each in a fresh sandbox — agents that pass once and fail the second time are more common than you would think.