Open-source control layer that approves, blocks, or escalates AI agent payments, refunds, emails, account changes, and other irreversible actions before execution.