Enforcement
Compliance is code, not instructions
A prompt is guidance; an executor check is a control. The identity gate, the calling window, the consent check, and the approval queue for anything outside policy are enforced where the decision happens, and a flow that lacks one cannot be published.