Policy-driven governance engine with audit runners, evidence capture, and actionable compliance reports.