How do you make LLM agents reliable enough for production?

We've built a multi-step agent for contract review that works well in demos but fails unpredictably in production — wrong tool calls, missed steps, hallucinated outputs. What does a production-grade agent architecture actually look like? How do teams add the guard rails without crippling the agent's usefulness?