Wrap any AI agent — Claude Code, Cursor, Codex — in one command. See every API call, file, secret, and tool it touches, then control it: stop prompt-injection attacks, block data exfiltration, hold risky actions for approval, cap runaway spend. Monitor first, then enforce.