“Data-flow governance, not just action governance. An Agent Clean Room governs what leaves. Auditable evidence at every decision point. The architecture forces classification and privacy compliance — policy documents alone cannot.”