Top-level policy shape
Policies are YAML files. A common layout:Rule fields
| Field | Notes |
|---|---|
priority | Integer; unique in this policy. Lower = higher precedence among matches. |
name | Stable identifier for logs and artifacts. |
when | Condition on signals: at minimum metric; operator; threshold unless operator is presence. |
then.action | pass, block, or require_approval. |
then.reason | Optional human-readable explanation. |
Operators
- Comparison:
>,<,>=,<=,==— requires a numeric signal value for that metric (and component if specified). presence— true if a matching signal exists; value optional.
Priorities and “winning” rule
All rules that match are considered. The winning rule is the one with the smallestpriority value among matches. That rule’s action drives the policy outcome before cross-policy merge.