Governance proxy for MCP - enforce policies, cap cumulative cross-tool spend, route approvals, check evidence, and audit every AI agent tool call. No changes to agent code or MCP servers.