Lean-native temporal policies and runtime guardrails for agent tool use