Guardrails

The explicit limits on what an agent may do on its own. Guardrails name which systems the agent can write to, which actions need a person's approval, and what it will never do -- delete data, act outside an approved model, or hand someone a finding they cannot verify.

You set guardrails before an agent runs, not after. They are the reason you can give an agent real work.