Policy-as-code

A retrieved document made the model propose a 50,000 euro discount. The prompt injection succeeded, but the action did not. Here is the deterministic policy boundary that stopped it. Part 3 of From Prompt to Proof.