Req Res User Input Guardrail (In) Agent Reasoning Tool Selection MCP Server Execution Guardrail (Out) Result