Governance proxy for MCP - enforce policies, route approvals, check evidence, track spend, and audit every AI agent tool call. No changes to agent code or MCP servers.