Skip to main content
The policy engine is a deterministic authorization layer. The LLM (or local_rules fallback) proposes plans; predicates decide whether execution may proceed.

Core predicates

All five must pass:

Where code lives

Failed checks emit guardrail_evaluated with a violations[] array. The replay UI surfaces each rule as pass/fail in the Policy validation node.

Formal spec

See the full predicate table and failure semantics in Policy specification. To extend predicates, follow Write a policy.