CHARON

Before agents act, Charon decides. A local boundary for shell commands, file access, network calls, and MCP tools. Charon checks the action first, returns a verdict, then writes proof of the decision.