The only place a yes is issued.
A single policy decision point for people, services and AI agents. Every enforcement point asks it; none decides alone.
- Deny precedence across all matching rules
- Fail closed on any unavailable dependency
- Approvals bound to a hash of the exact content
- Delegation that can narrow authority, never widen it