Guardrails sit in the governance layer of the harness. They fail closed for safety-critical paths and should be traced so you can see when and why a request was blocked.
OpenLIT includes open-source guardrails for prompt injection and related checks, correlated with OpenTelemetry traces so blocked calls show up next to the agent step that triggered them.