Function enforce_in_place 

pub fn enforce_in_place(
    mode: EnforcementMode,
    policy: &RedactionPolicy,
    record: &mut Record,
) -> Outcome

Enforce a redaction policy against a record.

• Block: rejects if any rule field is present.
• Transform: applies deterministic transforms (stable order) and accepts.