Layered defense — model / app / tool / human

Guardrails work in layers, each catching what the others miss: model-level safety
for content, application-level validation for domain errors, tool-level permissions
for unauthorised actions, and human oversight for judgment calls. Students learn that
no single layer is sufficient and how the layers compose.