Three checks before a voice agent goes live: scope its tools, keep keys out of prompts, and turn on Guardrails.