architecture

Why prompt hydration runs before policy

PII arrives inside the variables, not inside the template. That single observation fixes the entire stage ordering in the gateway.