Policy engine
Control spend with limits, category restrictions, and approval thresholds.
Policy rules
KYA checks
KYA-style checks are represented as policy validations in the mock implementation and can be replaced by real compliance providers later.