Expand description
What a policy declares about itself, statically — the data the applicability index is built from.
plan/policy.md: “Split what a policy declares from what it computes.
Applicability is static, declarative data — subject kinds, collections,
path prefixes, action kinds — and it is what goes in the tree. Evaluation
is opaque […] The core never needs to understand an evaluator’s
internals, only its declaration.”
Structs§
- Action
Set - Which
WriteActions a write-shaped applicability declaration covers. - Compiled
Id - A compiled predicate, as an evaluator itself names it.
- Evaluator
Id - An evaluator, registered once and referenced by any number of policies.
- KindSet
- Which account kinds a write-shaped applicability declaration covers.
- Policy
Declaration - One policy: its applicability, its observation surface, its staleness mode, its predicate, and its own revision.
- Policy
Id - A policy, identified by its position in a
PolicyTree. - Revision
- A policy record’s own revision, for detecting a stale observation.
Enums§
- Applicability
- What a policy statically applies to — the data the tree indexes on.
- Predicate
- What decides this policy’s outcome, once its applicability is already established.
- Repr 🔒
- Scope
- Whether a declarative dimension is unconstrained, or limited to a specific set of values.
Constants§
- AGENT_
BIT 🔒 - ALL_
KNOWN_ 🔒BITS - CREATE_
BIT 🔒 - DELETE_
BIT 🔒 - HOST_
BIT 🔒 - PIPELINE_
BIT 🔒 - SERVICE_
BIT 🔒 - UPDATE_
BIT 🔒