When agents act on their own, governance has to live in the data layer