AgentFence is a local tool-call firewall that evaluates and controls agent tool calls through policy decisions, allowing, denying, or requesting approval before execution while generating auditable receipts. VeriCordon extends it by generating inspectable authorization evidence reports in CI/CD workflows. The system is designed for security operators to gate and audit agents they did not write.