Declarative policy DSL. Evaluated at prompt-time and tool-invocation-time. Every block emits a signed audit event.