Expand description
Read policy is injected into the plan before execution; this module covers the cases injection cannot reach, where the engine has to actively gate the operation. Anything that mutates state or transitions a session goes through these enforce calls, and a “trusted” path that skips them runs no policy at all.