Sending a classified prompt down the execution path its tags earn — a registry-matched, low-sensitivity prompt executes immediately; a minor modification gets logged and auto-approved or flagged; an ad-hoc or sensitive-intent prompt is held for review — the routing table itself is the domain's policy engine made concrete.