The TCP/IP of Agentic AI Has a Security Problem: How to Govern MCP Before It Governs You

13,000+ MCP servers launched on GitHub in 2025. CoSAI published a taxonomy of 40 threats across 12 categories. Tool poisoning achieves 84% success rates. Here's the technical anatomy of MCP's attack surface, and how runtime governance closes the gap.