In a Zero Trust architecture, a request to access a resource is evaluated against policy along with signals such as user identity, device posture, and risk score. Which control-plane component is responsible for making the final grant-or-deny access decision?