Cluster-scoped and platform-owned: every domain gateway asks the same server, so
a rule is written once rather than five times.
The policy has an opinion about arguments and none about anything else — the
handshake, the tool listing and the REST surface pass untouched. Two rules
today: a cap on how much one call may read, which is what a request-counting
rate limit cannot see, and a bound on a unit price, which is the parameter that
turns a permitted write into an expensive mistake.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Stéphane Tailland