The work visa for AI agents. A high-performance Rust sidecar that deterministicly blocks unauthorized actions before execution.