Make agent work prove itself with scoped authorization, budget ceilings, recovery, evidence gates, and signed traces.