Warden sits between your AI agents and the outside world: approved sites only, keys they never see, decoy credentials, a kill switch, and a tamper-proof log.