retellai-policy-guardrails

The fragment implements ordinary call-policy and cost-control functionality and contains no evident malware or intentional data theft. It has meaningful security and compliance weaknesses: unauthenticated request handling, weak consent parsing, incomplete recording-state enforcement, and nonfunctional or inaccurate in-memory cost accounting. The unseen generateResponse implementation and webhook authentication configuration require separate review.