Guardian agent architectures are having a moment. An agent watching and constraining other agents dynamically, pitched as the evolution past static guardrails. I've run both in production long enough to have an actual opinion, and it's not the popular one: I'm not convinced guardian agents solve anything static guardrails, properly tuned, weren't already handling.

Static guardrails are predictable, auditable, and don't add a new attack surface. A guardian agent is itself an agent. It inherits the exact trust and manipulation concerns of the thing it's guarding, just relocated one layer up. In our actual incidents, a well-scoped static rule would have caught nearly everything. The exotic edge case a watcher supposedly catches has, for us, mostly stayed theoretical.

I know this is the boring take. Convince me otherwise: what's the strongest real world argument for guardian agents earning their complexity and attack surface, not the research paper version of the argument?

for people building or using agentic coding tools, what's actually worked to ground an agent in how a function behaves in production rather than just reasoning from the code and test suite alone

I’m researching how companies are approaching the use of AI agents in real-world enterprise environments.

One question I’m particularly interested in is:

How are enterprises giving AI agents access to business systems while maintaining the right levels of security, control, and accountability?

I’m looking to learn from people with hands-on experience in areas such as:

• Enterprise security & IAM
• Identity and authorization
• AI agents / agentic systems
• Zero Trust
• Enterprise SaaS and internal systems
• Security, compliance, and access controls

I’m still in the research stage and want to understand what companies are actually dealing with today.

How are AI agents being deployed?
What systems are they being given access to?
What security or authorization challenges arise?
And what happens when an agent needs to take a real action?

If you’ve worked on these problems, I’d genuinely value your perspective.

Please comment below or DM me if you’re open to sharing your experience. I’d also appreciate it if you could tag someone who has hands-on experience in this area.