Pre-action gate: verify before pay/trade/write/deploy. execute=true only on ALLOW.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Pre-action gate: verify before pay/trade/write/deploy. execute=true only on ALLOW.