Module policy 

Policy engines: the trait + native Rust rules.

Structs

NativePolicy

Native policy: closure-based rules (the zero-dependency default).

Enums

PolicyDecision

A policy verdict.

Traits

PolicyEngine

A policy engine evaluates (tool, arguments) → decision. Engines must be total: any internal failure is a Deny (fail-closed), never a panic.