Module governance 

Modules

audit

constraint

permission

pipeline

quota

Declarative resource quotas evaluated at the single syscall trap (M2 资源配额).

rate_limit

sandbox

tool_decision

veto