GStack guard method for strengthening scope boundaries, forbidden actions, stop conditions, and validation gates for an agent or workstream.