Let the model decide — then read the audit

Most "governed agent" demos are governed because the demo author pulled every string. The agent calls the tool the script says, in the order the script says, and the audit comes out clean because nothing could have gone another way. That proves the plumbing. It does not prove governance, because governance is what happens when the thing you are governing has a will of its own. So we took the strings off.