Llm

Stacking policy: defaults + fine-grained overrides for high-value secrets

We built a real ABAC policy engine on top of the identity and step-up work. You can now express 'everything under LLM/* needs a human in the loop' as a default, while stacking a more specific rule that says only …