Endpoint visibility into AI agent activity: local detection, optional pre-action blocking, and forensic reconstruction after the fact.