AI agent runtime governance control plane: intercept tool calls with PII protection, approvals, and formal verification.