Runtime Guardrails (Pillar Security) — 0-Doubt