A new policy engine blocks prompt-injection and data leaks by enforcing rules outside the agent's own execution loop.