A new architecture for adaptive security at the edge is proposed, which involves a split-control system with a governor that checks planner output against safety and resource invariants, preventing semantically wrong actions from being executed. This addresses a trust-boundary problem in automated planners, including LLM-assisted agents.