Run a pre-flight guardrail for MCP tools, payments, writes, and workflows; return allow/retry/block plus a Boundary Receipt.