Secure-coding guardian for AI agents — official CWE/NIST/ASVS guidance in-context, enforced at commit, proven at audit.