Should agents be the only place screening happens?

“For critical flows, most teams also enforce checks deterministically in application code — the REST API exposes the same data with the same credentials, so the backstop is one request away.”