Policy outcomes normally return HTTP 200. Treat the response body status as a
state machine, not as an HTTP success signal.
Only APPROVED or SENT represents a successful release. A QUEUED response
is not permission to enqueue the message in a sequencer.
Policy violations
Each violation identifies the rule, severity, matched content, reasoning, and
mitigation. BLOCK is a hard stop. WARN may route to human review depending
on workspace configuration.
Infrastructure failures
Authentication, validation, quota, rate-limit, and snapshot failures use non-2xx
responses. Follow Retry-After, next_step, reset_at, and X-Usage-*
metadata when present. See Errors. 
