Admission Control in Kubernetes: Where Policy Actually Gets Enforced

How admission control is ordered, what built-in Pod Security covers, and what a parameterised policy engine adds for enforcement and audit.