Metamynd Governance moves the decision out of the agent. Wrap a tool in three lines: every call is checked against a mandate the agent cannot edit, signed, and decided outside its process, and a refused call never reaches your code. Because the gate is default-deny, an agent cannot widen its own authority: ask for an action nobody delegated and the answer is NO_PERMISSION_FOR_ACTION, at $1 or $100,000.
Agent-side, MCP-server-side, Agent2Agent and HTTP guards with zero runtime dependencies, a deterministic open-source evaluator, and a Python client. MIT licensed.