"""Shield: the protective layer around the engine - policy, position awareness, posture audit, enforcement, playbooks.

    policy     what the operator allows the layer to do (report / enforce), per family and severity, allowlists
    position   what the layer can see from where it runs -> which roles it takes (edge WAF, host firewall, sensor, chain node)
    posture    what is exposed that should not be (listening ports vs policy, forgotten services), with fixes
    enforce    block / rate-limit / challenge with TTLs and an audit log; nftables, iptables, Windows Firewall, or dry-run
    playbook   recent attack patterns (2024-2026) as behaviour signatures over the engine's own features, with actions
    adapters   other inputs seen as streams (JSON-RPC for chain nodes)
"""
from dibaguard.shield.policy import Policy  # noqa: F401