Declare an agent in one file -- its tools, its rules, its users -- check it before it runs, and run it: every turn routed, every tool call checked, a failed run undone.