What guardrails should agent systems have?

Answer preview

Tool allowlist: Agent can only call pre-approved tools — no arbitrary code execution.…