Host policy runs after input validation, before the single Backend invocation.
Explicit Host-owned failure envelope, carried in structuredContent.backendResult.
Return a declared failure to stop, or undefined to call Backend with the original input.
Host policy runs after input validation, before the single Backend invocation.