Enforcing Intent-aligned Guardrails for AI Agents