Pick a starting configuration. Templates can add cite-or-refuse checks, spend caps, declared capability requirements, and content-free metadata receipts when signing keys are configured. Governed-call content goes directly from your runtime to your selected provider, not through AgentGuard infrastructure.