Four independent guardrail stages, RBAC-enforced retrieval, and an adversarial evaluation harness — mapped to OWASP's 2025 LLM Top 10 and 2026 Agentic Top 10.