Framework security floors plus application-level policy tightening.
@type t() :: %Synaptic.Voice.SecurityPolicy{ allowed_scopes: term(), denied_capabilities: term(), force_confirmation: term(), metadata: term() }