Why AI agents violate policy silently — a controlled test, and an external gate | Manifund