Put the Guardrail in the Code, Not the Prompt

Hard limits for AI agents belong in code, not the prompt: the model reads prompt rules and breaks them. Plus the deny-by-default trap that does nothing.