Action middleware for AI agents in production. Intercept every tool call. Enforce policy. Remember everything.