An agent deleted a production database in nine seconds

The PocketOS incident had three missing guardrails, not one. Here's what each of them is, why the system prompt didn't help, and how to put them in place before your agent finds the same gap.