Aegis

One waterfall permission cascade every agent action flows through — fastest-local-classifier-first escalation, Snapp-exposed.

Waterfall cascade — a layered permission cascade that escalates fastest-local-classifier-first.

One guard — every classifier and policy check flows through a single engine, not scattered ad-hoc.

Snapp-exposed — configurable and callable as a Snapp.