Enforce required classification tags, deny non-compliant requests, and attach redaction metadata for downstream logging.

Allow only approved models/tools per environment and route, reducing policy drift across teams.

Decision objects include rule identifiers and request IDs, designed for incident response and compliance evidence.

Validate policy behavior in the sandbox, then move to paid enforcement without changing request shape.