Why would any company leave the enforcement of rules to an agent? If something is truly a rule, there should be code that deterministically enforces it.
That's a great point; in general, you want as much enforcement in the code as possible - but there are some things which you fundamentally can't enforce through code. E.g. the example challenge - you can't write a regex which will retract all bio-weapon responses