Function decide 

pub fn decide(effect: Effect, mode: Mode) -> Decision

The default agent policy: humans get default-allow (great errors instead of friction); agents get default-deny for the dangerous classes. This mirrors the AetherShell agentic-first model so the score reflects a real, shipped policy.