Guardrails belong at the tool boundary not in the chat tone. I wrap risky actions behind an allow list and a dry run flag. That keeps the model creative while the blast radius stays small.