From the source
The policies run at the gateway perimeter and cannot be bypassed by the agent.
From the source
Temporal policies in Amazon Bedrock AgentCore let you define stateful rules that determine authorization to AgentCore Gateway targets by evaluating the current request in the context of prior events in an agent’s trajectory.
aws.amazon.com