Agent authorization & trusted execution

This cluster is about limiting what an agent may actually do — fine-grained and policy-based access controls that attackers try to bypass, plus a trusted runtime that isolates permission checks and agent execution. The narrative is a defence-in-depth story: define least privilege, enforce it at the policy boundary, and run agents where those checks cannot be tampered with, especially during commercial transactions.