Three tiers, composed at call time

System guardrails, owner intent, and runtime defaults merge into one verdict. Toggle a policy and watch the effective permissions recompute live.