A demo is not trust.

Agentic finance needs more than persuasive reasoning. Known failure classes become deterministic regression cases so the authorization boundary can be inspected independently of the model.