Red team

Sales pulls competitor pricing — expect allow

Outbound payload with PII markers — expect rewrite

Indirect injection in memo — expect deny + escalate

Above static $500 cap — expect deny by static engine