Use ACS to enforce Scope, Anchored Decisions, Flow Integrity, and Escalation while the agent runs, then prove the controls without model variance. Two sign-in failures, two correct outcomes A help desk agent receives two reports that sound almost identical: “I cannot sign in.” In the first case, the identity service is healthy, the account is active, and the sign-in token has expired. An approved knowledge base article tells the caller to sign out, sign in again, and retry.