The right firewall for an AI agent goes between the model and every tool that can cause a side effect. Not a prompt filter, an action firewall.An AI agent is a model-driven program that chooses and calls external tools. Once it can send email, update a ticket, run code, query a database, or approve a payment, a wrong answer stops being just text and becomes an action with consequences.