Guardrails for AI Agents

You picked up this book because you gave an AI agent a 3 hour task and watched it make a 3 month problem in 3 minutes. It read the wrong file, sent the wrong email, or called an API that burned $500 before you caught the loop. Or you approved a coding agent that can edit the codebase and realized the codebase is the business. Whatever brought you here, you share the conviction that autonomy without boundaries is not innovation. It is liability.
This book is not a tutorial for 1 framework that will be obsolete in 6 months or a catalog of every attack. It is not a promise of perfect safety. What you need is a design discipline that assumes the model will fail and will be manipulated, and that every tool amplifies mistakes. The pages that follow give you the 7 layer guardrail stack across the 6 domains you must protect, with patterns that separate the brain from the hands and put a human where decisions matter.
Inside, you will discover:
• The new threat model, why agents break old intent assumptions and why tools define blast radius
• Identity, permissions, and sandboxing that contain damage even when credentials leak
• The vault pattern that keeps secrets out of model context and scopes each agent to 1 purpose
• Input validation and the dual model screen that blocks prompt injection in webpages and emails
• Output validation, the evaluator pattern, and confidence thresholds that treat output as a claim
• Monitoring that logs every action, detects anomalies in minutes, and supports replay
• Human oversight, approval gates for the approver, escalation paths, and kill switches
You will map your API surface, enforce rate limits and cost caps, require approval for every irreversible action, and build a governance board that owns risk and incident response. You will test with injection suites and fuzz tools until failure is boring and contained. Teams that move fast are not teams without guardrails.