Governance-as-Code for AI agents. One file declares everything an agent needs to run safely in production: identity, credentials, policy enforcement, audit trail, observability, and compliance. One runtime enforces it.