Your AI Agent Needs a Brake Pedal: Approval Gates, Scoped Permissions and Dry Runs

An agent with a production write tool is one confidently-wrong plan away from an incident. Three guardrail patterns, with code, and how to choose between them.