Auto Remediation

Policy Engine Active — Every action passes through the policy registry before execution. Database, volume, and credential changes are permanently blocked from auto-execution.