Two axes of agent governance: a floor that bounds what the agent does (allow / deny / ask-a-human) + an opt-in harness that reconciles what came back against what you asked for. Sibling of bareagent in the bare suite.