Microsoft is treating their agents which want to delete customers' entire hard drives with post-inference guardrails instead of training