TimePolicy

The variable part of TimeManager's clock allocation.

A policy estimates how many turns the moving side still has to budget for. TimeManager deliberately owns the safety envelope around that estimate — reserve, hard cap, panic clamp, and caller overhead — so every policy gets the same anti-flag guarantees.

Policies are pure and platform-independent. Consumers choose one when they construct a TimeManager; deployment configuration (environment variables, Worker bindings, command-line flags) belongs to the consumer rather than this shared engine module.