Governance gateway for AI agents — bounded, auditable, session-aware control with MCP proxy, shell proxy & HTTP API.