I built an open-source runtime security layer for AI agent actions — local-first, MCP approvals, credential isolation and verifiable audit receipts