Roles, segregation of duties, and tamper-evident audit for the AI agents you already run. Open-source, self-hosted.