AI Agent Guardrails: Rules That LLMs Cannot Bypass