Universal security gateway for AI agents. Blocks destructive actions, redacts PII, detects prompt injection, tracks taint across tool calls, and requires human approval for sensitive operations.