The infrastructure of No — unsafe decisions are stopped before execution; safe decisions become immutable, signed evidence.
Every model decision is checked against policy in real time, captured as a cryptographically signed certificate, and made replayable — so any auditor can verify exactly what happened, and why.