Fail-closed no-egress policy for lower-runtime simulation boundaries.
@type t() :: %ExecutionPlane.Contracts.NoEgressPolicy.V1{ contract_version: String.t(), denied_surfaces: map(), enforcement_boundary: String.t(), mode: String.t(), owner_repo: String.t(), policy_ref: String.t(), required_negative_evidence: [String.t()] }
@spec contract_version() :: String.t()
@spec default_lower_boundary_policy!() :: t()
@spec dump(t()) :: map()
@spec new(map() | keyword() | t()) :: {:ok, t()} | {:error, Exception.t()}
@spec new!(map() | keyword() | t()) :: t()