Every layer of the AI stack needs authorization. Kastra provides one policy plane that spans model calls, tool invocations, retrieval, and agent orchestration.