Building a policy and audit layer for AI agents running in n8n — checks, approvals, and a tamper-evident log for agents with real write access (refunds, emails, CRM writes, anything that shouldn’t run unsupervised). Non-technical founder, learning a lot of this in public. If you’re running agents with real write access, I’d genuinely like to compare notes.