Kastra evaluates triggering human-in-the-loop approvals policy in a p50 of 0.3 ms and a p99 under 1 ms. The decision engine uses partial evaluation, cached ASTs, and vectorized rule matching on a Rust runtime. For most high-risk actions the authorization step is invisible end-to-end.