What we have learned at OpenShell applying formal methods to control AI agents