Policies

Control which routes and methods each client can access.

Policy model

Policies bundle route rules, method limits, and access constraints.