Bindfort sits between AI agents and MCP servers to enforce tool-call policy, check installed-tree risk, generate receipt evidence, and keep the dispatch path fast.