local_rules fallback) proposes plans; predicates decide whether execution may proceed.
Core predicates
All five must pass:
Where code lives
Failed checks emit
guardrail_evaluated with a violations[] array. The replay UI surfaces each rule as pass/fail in the Policy validation node.

