Enforces, not just retrieves check_action checks an action against your rules before it happens, and cites the rule that decided it.

Git-native Rules live as files in your own repo. Versioned, diffed, reviewed like code.

Human-approved Merging a PR is the approval. No dashboard, no separate sign-off screen.