I asked for fewer AI agent guardrails twice. Most became switches, nine stayed fixed. What we kept, why, and how 472 security tests check the core still holds.