Optional host policy over automated entry, AND-composed with the agent's own
allowedAutomation. It can only DENY: returning true where the agent did not
declare the entry changes nothing, so a host cannot widen automation from its
wiring. Absent means "no additional restriction", not "allow".
Optional host policy over automated entry, AND-composed with the agent's own
allowedAutomation. It can only DENY: returning true where the agent did not declare the entry changes nothing, so a host cannot widen automation from its wiring. Absent means "no additional restriction", not "allow".