- **KYC/AML gating:** only verified investors can hold the token.
- **Jurisdiction filters:** block or allow by country/state lists.
- **Investor caps:** per-holder or total holders, plus 12-month look-backs.
- **Transfer windows & lockups:** primary issuance vs. secondary trading periods.
- **Sanctions & revocation:** emergency pauses and forced freeze/unfreeze under policy.