PolicyCtl is a provider-agnostic policy runtime for AI coding agents. It enforces rules deterministically before actions execute, instead of relying on prompt instructions. One `.policyctl.yml` policy works across Claude Code, Cursor, OpenAI Codex, and CI, with sub-12ms local evaluation, pre-execution blocking, secret detection, policy-file protection, and native hook generation.