Agent security needs a local enforcement point, not just logs

Disclosure: I’m posting from Armorer Labs, where we work on Armorer and Armorer Guard. Most agent stacks now have traces. Traces are useful after something goes wrong, but they do not stop untrusted t...