Module enforcement 

Default-off enforcement of defense-aware planning.

This is the only place defense evidence is allowed to change the real plan, and only when explicitly enabled. It reuses the side-effect-free shadow layer to decide what to suppress, then filters the already-authorized baseline through the distinct crate::planner::ExclusionReason::DefenseSuppressed path — never by replanning, selecting an action, raising utility, or reaching into any store.

Release discipline: DefensePlanningPolicy is off by default. While disabled, this returns the exact plan the planner would produce with no defense influence, byte for byte.

Structs

DefensePlanningPolicy

Whether observed defense is allowed to change the real plan.

Functions

defense_aware_plan

Produces the real plan, applying defense suppression only when enabled.