Guardrails

Agent-level input and output guardrails — pure validators that can short-circuit a run with a refusal.