Kastra gates every Cascade action against policy — a signed record for every edit, command, and tool invocation.