A safety mechanism that defaults to denying/blocking actions when uncertain, rather than allowing them.