Agent Boundary

AI agents can read public trust and request preflight, not private execution.