Module governance 

Modules

constraint

permission

pipeline

quota

Declarative resource quotas evaluated at the single syscall trap (M2 资源配额).

rate_limit

repeat_fuse

O6: RepeatFuse — the hard rungs of the no-progress escalation ladder.

veto