Governance backplane for AI agents acting on infrastructure — policy-gated, audit-grade,…