Evaluating deterministic policy rules against each attempted tool call, resolving to block, filter, or flag for review.
Deterministic policy matching evaluated synchronously at the moment of the tool call.
Policy/rules engine