Building control foundations for trusted agentic AI