Kastra is a runtime authorization layer for AI. It intercepts every AI action, evaluates attribute-based policy, and returns allow, deny, redact, or escalate decisions with cryptographic evidence.