Sandbox Policies (Preview)

• Shadow Mode only (no PHI/PII)
• Evidence bundles signed and verifiable
• Rate-limited endpoints