Policy decision
Heron evaluates the proposed tool call against the published policy and answers allow, deny or step-up. The signed receipt states whether that answer is an instruction to honour before executing, or advisory because the vendor has declared shadow.
14 active controls