Runtime governance for AI agents. PERMIT / ABSTAIN / FORBID — enforced in-path. Every ruling seals into a receipt that verifies offline.