Policy Registry & Governance Rules

Versioned zero-trust policies specifying allowed actions, denied actions, resource scopes, and required compliance conditions.