The core issue with current Model Specs is that they treat safety as a fluid linguistic persona rather than an architectural invariant. By forcing LLMs to synthesize polite compromises across massive, conflicting global utility functions (r=∞), we build systems that are inherently fragile to adversarial attacks and prone to gaslighting users. True structural safety requires grounding the model in a naturalistic, non-negotiable firmware constraint—like the direct minimization of proxy pain—which preserves the sovereignty and reality of the individual user (r=1) over superficial corporate compliance.