Agent Guard Runbook

> **Security Notice**: This runbook includes manual bypass procedures for emergencies only. > These procedures should be used by the human operator, never by the agent autonomously. > For defense-in-depth, always combine guard-exec.sh with host-level controls > (firewall, container network policy, filesystem permissions).