Enforcement API

The enforcement boundary makes a governance decision authoritative for protected execution.

A blocked action must not continue into the protected execution surface.

The canonical runtime exposes an EnforcementGate enforcement surface.