Build Config-Driven Guardrails

Express input and output policy as configuration, enforce it outside the model, and fail closed on bad shapes.

In this module

• Where Guardrails Fit
• A Lightweight Rule Engine
• Fail Closed Without Blocking Everything