The loop can write correct code unattended. What it can’t do is grant itself permission — and in a regulated estate that gap is a gate, not a better checker.
The SDLC isn’t dying, it’s migrating from documents into the execution engine. Most organisations stall at machine-speed delivery under human-speed governance. The missing piece is a function nobody is staffed to own: interpretation binding.
Token Jail is not vendor lock-in. It is what happens when implicit authority meets machine-speed execution. The dependency lives in the operating model, not the API.