Deterministic guardrails for AI agents that check data sensitivity before every tool call, running in-process or as a sidecar.