Control what AI agents are allowed to do, before they do it.