Three categories of guardrails

There are only three categories of guardrails to prevent harm from agents. First, relying on hard constraints to only allow certain kinds of behaviour. For example, limiting which tokens can be decoded ( structured output ) or exposing only a specific set of tools to an agent. Assuming correct implementation, these guarantee