The industry spent two years debating whether models are safe. Meanwhile, enterprises wrapped ungovernable systems around safe models. Safety is a property of the system, not the model.

Here's a question the model safety debate never wants to answer.

Your model passed every safety benchmark. It's aligned, red-teamed, tuned within an inch of its life. And it's wired directly to your production database with admin credentials, it can send email as your company, and nobody can reconstruct what it did last Tuesday. Is your system safe?

If you hesitated, you already know the answer. The model is safe. The system isn't. And the system is what ships.

The debate is aimed at the wrong layer

For two years, the conversation about AI safety has been pointed at the model. Benchmarks. Evals. Red-teaming. Leaderboards with safety scores. All of it useful, none of it sufficient.…