What are guardrails, and where do they sit in an agent?

Checks outside the model on what goes in and comes out: input filters for injection or off-topic requests, validation of tool calls before they run (allowed tools, arguments, permissions), and output checks for policy, private data and format. The tool boundary matters most, because that's where an agent's mistakes become real actions.