def policy_gate(text, requested_tool, max_chars):
    return {'allowed': ..., 'reason': ...}

1. enforce a bounded tool allowlist
2. reject common instruction-overrides
3. return one structured policy reason

• Use only the Python standard library.
• Return deterministic values so every run can be compared with the contract.
• Do not mutate caller-owned inputs.