Pick a per-call privacy class — Standard, Protected, Private Gateway, or Confidential.
MESH classifies every call into one of four privacy classes. The class controls upstream
selection, logging behaviour, and the privacy block returned in the response. The router
enforces the class — it cannot be silently downgraded.
The legacy form is still accepted; mode: "mesh" maps to private_gateway_route and
mode: "standard" maps to standard_route. New code should prefer class.