Live policy hot-swap

Compliance just watched you revoke claims-bot-v2. Their next ask isn't about that one agent. It's about every agent: until the regulatory review wraps up, no EU staff should be able to export customer data — not through any tool, not via any agent.

That question normally turns into a ticket, a PR, a deploy. Days. Instead, you're going to edit the policy directly and prove it blocks an in-flight call before the meeting ends.