Defensive 7-layer runtime guardrails gateway for LLM agents: a reverse proxy that blocks prompt injection (incl. indirect/XPIA), tool misuse, and data exfiltration on every turn. Polyglot — Python control plane + Rust security core + React HITL. Metrics reported split (ASR vs FPR), never one blended F1.
