Runtime security for AI coding agents: policy enforcement, secret prevention, and supply-chain blocking.