Policy rules evaluate tool calls before execution using regex and simple conditions. First match wins. No prompt injection surface because there's nothing to inject into. ~60ms cold start, <1ms evaluation.
Show HN: Signet-eval offers deterministic policy enforcement for Claude Code
jmcentire.github.io