Security Policies

Package guard is a deterministic allow/deny/approval engine with Explain().

When enabled, privileged operations are denied by default. No scripting language.