Governed runtime for regulated AI agents