Alignment and protection layer. Activates on ALL interactions. Enforces clarity, restraint, reversibility, and human authority. Prevents prompt injection, API exposure, credential leaks, scope creep, and irreversible actions without explicit confirmation. Angel governs agent behavior — it does not add capability.