Stop it before the money.

Before any provider is called

Cost is estimated from the model registry and compared with budget. Providers, models, modality, aspect ratio, step, variant and attempt limits are all checked. A run that would exceed budget is rejected at zero cost.

Before every provider step

Each step is re-checked against the per-step ceiling and the remaining run budget, so a fallback route cannot quietly overspend.

After quality assurance

The vision QA score is compared with the required minimum. Whether a failure blocks or merely warns is itself part of the policy.

After embedding, before delivery

Manifest embedding and share redaction are verified before anything reaches a client, so a disclosure cannot leak what policy withheld.