Guardrails sit outside the model: input filters, output classifiers, schema validators, tool allow-lists, and human approval gates. They are the difference between 'the model tries to behave' and 'the system cannot do the wrong thing'.
Good guardrails fail closed: when unsure, they refuse or escalate rather than proceed.