Audit & policy

Every agent action is identity-stamped, policy-checked before it runs, and written down after.