In a Zero Trust (ZT) model, where should the enforcement component be placed and why?

Between the policy engine and the trust engine, because it enforces security policies

As close to the workload as possible, because it impacts authorization decisions

As close to the workload as possible, because it impacts authentication decisions

Between the data stores and the trust engine, because it improves security policies