Sovereign Execution Brokers: Enforcing Certificate-Bound Authority in Agentic Control Planes — ThinkLLM