Signing Spine / Policy

Execution policy determines what can happen next.

The policy layer evaluates authoritative room facts such as identity, package integrity, role, signing progress, witness requirements, and finalization state.