I work at StackOne. This is the policy layer in our tool gateway: fixed rules on Cedar, semantic rules answered by a decision model, and our own PII model, all checked on each tool call's input and output. Happy to answer questions about how it works!