The Model Proposes
In Countersign, a cloud-cost agent, the model has no write path: it drafts an evidence-backed change request, people countersign, code it cannot reach executes only what they signed, and the evaluation tests its graders before it trusts a score.