Reference monitors for coding agents

Coding-agent policy belongs at the tool boundary: every relevant action mediated, outside agent control, and small enough to test.