Policy Engine
Declarative rules that evaluate every agent action at runtime.
Policies define allow, deny, or require-approval rules based on action type, agent identity, resource sensitivity, and custom conditions.
text
deny action:"database.drop"
require approval action:"email.send" to:external
allow action:"search" rate:100/min