Policy-governed capability gateway for bounded, auditable and verifiable agent operations — capability without credential custody.