Show HN: Runtime security enforcement and capability scoping for agents