Continuous verification that an agent's execution remains within authorized scope and cannot access unintended systems.