An agent's guardrails include a turn limit, allowing operations only within a sandbox, and pausing all sensitive actions (canceling orders, payments, deletions) and handing them to a human.