P

policy-as-code

Structural integrity gate. Intercepts changes before execution and rejects when historical invariants break — even when cosign says Verified OK.