In a Zero Trust (ZT) model, where should the enforcement component be placed and why?

As close to the workload as possible, because it impacts authorization decisions

Between the data stores and the trust engine, because it improves security policies

As close to the workload as possible, because it impacts authentication decisions

Between the policy engine and the trust engine, because it enforces security policies