Gates every Edit/Write in this session against vord's Agent Permission Policy (vord-policy.toml) before the bytes reach disk.
