Guard rails are internal-the agent's operator controls them. Covenants are cryptographic and independently verifiable by a third party. That's the difference.