The MAGEN Gate policy engine maps confidence scores to decisions. Security teams define thresholds per action, per service, and per risk tier, so a password reset and a wire transfer can carry different requirements. Decisions are deterministic given the policy thresholds applied to a probabilistic confidence score: the same score under the same policy always yields the same outcome. Policies are versioned, every decision records the policy version that produced it, and changes can run in shadow mode before enforcement.