Governance runtime for AI tool invocation. Enforces persona scope and combination policies at the MCP layer; INSERT-only audit trail.