Claude drafts refund decisions that a downstream system executes. Policy says refunds above a threshold need manager approval, and the system prompt states this clearly. An audit finds several above-threshold refunds were issued without approval. What is the most appropriate change?

Answer: B — Enforce the threshold in code before execution and route larger refunds to an approval queue

A hard business rule is enforced in code at the output-to-execution boundary, which (b) does. (a) and (c) still rely on probabilistic compliance with a prompt. (d) is a detective control that finds violations after the money has gone.