Expand description
Wraps the HTTP builtins with policy guards after registration, the same
shape readonly and approval use. Enforcement lives here rather than
inside the builtins so one place decides, and the transport code stays
unaware of who is allowed to call it.