Post

The point about action controls matters most. A guardrail lowers the rate of bad output, it never gets it to zero. So the last check sits on the action: log every tool call, validate the arguments with code, and require a person for anything that can't be undone.