Steerability via constraints: a substrate for scalable oversight of coding agents