Hardening a fail-closed runtime for agentic AI systems | Manifund