Put an Agent2Agent (A2A) agent behind your gateway so other agents discover it there, block messages that carry personal data, and give each caller a token budget.