guardrails: containment as a required companion, verify-the-agent rule, and retiring a subagent cap that no longer exists - #21