AI command attestation with two-tier policy model: infrastructure policies + feature policies with AI evaluators