What is the latency overhead of authorizing model outputs at runtime?

Kastra evaluates preventing PII leakage from LLM outputs policy in a p50 of 0.3 ms and a p99 under 1 ms. The decision engine uses partial evaluation, cached ASTs, and vectorized rule matching on a Rust runtime. For most model outputs the authorization step is invisible end-to-end.