The guard rails and protection for the good "AI" was mostly that it's abilities to perform actions was extremly limited.

It could not, as far as I can remember, take actions outside of passing a SSN of an endangered person to the protagonists for the initial seasons and only lived of information provided by the government surveiallance network. The latter seasons and the bad "AI" mostly changed that especially as the bad "AI" was weaponized with exactly this guardrail missing.