Every Devin action — shell command, file write, API call — is evaluated against policy and logged with cryptographic evidence.