Runtime Control Plane
Tokens, routing parameters, and sovereign geo-boundaries are enforced at the proxy runtime boundary.