Paste an approval payload, apply a policy pack, and mint a deterministic receipt.
The generator produces a deterministic ID, SHA-256 receipt hash, policy trace, and blast-radius estimate before the final Decionis signature is issued.