Add runtime policy engine

Author: whut09

.agent-context/AGENTS.generated.md

@@ -20,8 +20,8 @@ L0 operating rules. Keep this file loaded by default; load deeper context only w
 ## Project Entrypoints
 - Entrypoint: `src/cli/index.ts`
 - Entrypoint: `src/mcp/server.ts`
-- Anchor: `src/outputs/task-harness.ts` - 5 exports, 67 symbols
 - Anchor: `src/core/freshness.ts` - 9 exports, 57 symbols
+- Anchor: `src/outputs/task-harness.ts` - 5 exports, 67 symbols
 - Anchor: `src/outputs/contract-validator.ts` - 5 exports, 65 symbols
 
 ## Commands

.agent-context/architecture.md

@@ -9,8 +9,8 @@ This document is generated from static repository signals. Treat it as a startin
 - Internal modules: 25
 
 ## Important Modules
-- `outputs`: outputs contains 22 files and depends on core.
-- `test`: test contains 26 files and depends on analyzers, benchmarks, cli, config, core, mcp, outputs, retrievers.
+- `outputs`: outputs contains 23 files and depends on core.
+- `test`: test contains 27 files and depends on analyzers, benchmarks, cli, config, core, mcp, outputs, retrievers.
 - `core`: core contains 17 files and depends on analyzers, config, llm, outputs.
 - `retrievers`: retrievers contains 6 files and depends on core, outputs.
 - `analyzers`: analyzers contains 6 files and depends on core.

.agent-context/contracts/architecture.contract.json

@@ -113,7 +113,7 @@
       "imports": [
         "core"
       ],
-      "summary": "outputs contains 22 files and depends on core."
+      "summary": "outputs contains 23 files and depends on core."
     },
     {
       "name": "test",
@@ -130,7 +130,7 @@
         "outputs",
         "retrievers"
       ],
-      "summary": "test contains 26 files and depends on analyzers, benchmarks, cli, config, core, mcp, outputs, retrievers."
+      "summary": "test contains 27 files and depends on analyzers, benchmarks, cli, config, core, mcp, outputs, retrievers."
     },
     {
       "name": "core",

.agent-context/contracts/module-boundaries.json

@@ -41,6 +41,7 @@
         "src/outputs/markdown.ts",
         "src/outputs/module-map.ts",
         "src/outputs/onboarding.ts",
+        "src/outputs/policy-engine.ts",
         "src/outputs/rag.ts",
         "src/outputs/readiness.ts",
         "src/outputs/repo-summary.ts",

.agent-context/contracts/test.contract.json

@@ -47,7 +47,7 @@ graph TD
 | cli | benchmarks | 1 |
 | cli | config | 1 |
 | cli | core | 8 |
-| cli | outputs | 11 |
+| cli | outputs | 12 |
 | cli | retrievers | 1 |
 | config | core | 2 |
 | core | analyzers | 4 |
@@ -58,15 +58,15 @@ graph TD
 | mcp | core | 1 |
 | mcp | outputs | 5 |
 | mcp | retrievers | 2 |
-| outputs | core | 33 |
+| outputs | core | 36 |
 | retrievers | core | 3 |
 | retrievers | outputs | 2 |
 | test | analyzers | 3 |
 | test | benchmarks | 1 |
 | test | cli | 1 |
 | test | config | 3 |
-| test | core | 31 |
+| test | core | 33 |
 | test | mcp | 1 |
-| test | outputs | 16 |
+| test | outputs | 19 |
 | test | retrievers | 1 |
 | test/fixtures/monorepo/packages/web | test/fixtures/monorepo/packages/api | 1 |