That framing is right, but monitoring is not the same as evidence. A guardrail should emit a receipt binding the requested action, policy/version, permissions in force, model/tool inputs, approval boundary, and observed result. Otherwise a blocked action is just a dashboard color. The hard part is proving what the agent was allowed to do—not only spotting what it did.