agent_execution_guard
execution_boundary
