An OS-grade security boundary for composable AI agents, delivering capability-secure execution and auditability.