Fail-closed enforcement for AI agents: deny what you cannot verify · HackerTrans