AMS: Audit-First Operating Layer for AI Agent Workflow