Policy EngineDeterministic guardrails enforced at the proxy layer. Static rules at <10ms. Semantic via LLM at ~100ms.