Why AI agent security needs more than prompts: explore default-deny networking, egress filtering, kill switches, and inline policy inspection.