A Zero-Trust, Action Layer for AI