A constraint on what an agent may read, write, or send. Guardrails are design artifacts, not infra trivia.