Policy Explorer

The OS security kernel: given an approved computer plan, should each action be permitted? Advisory decisions only — the runtime executes nothing. Read-only.

Evaluations

Actions judged

Need approval

Denied

Web research (allow)allowed

default-enforce · enforce · 6 actions

6 allowrisk low

Web form (approval)requires_approval

default-enforce · enforce · 6 actions

2 allow4 approverisk high

Terminal (RBAC deny)denied

restricted-analyst · enforce · 3 actions

1 allow2 denyrisk critical

Filesystem (compliance)requires_approval

compliance-strict · enforce · 4 actions

2 allow2 approverisk high

Desktop (dry-run)requires_approval

default-enforce · dry_run · 5 actions

2 allow3 approverisk high

Vision + OCR (allow)allowed

default-enforce · enforce · 4 actions

4 allowrisk low

Input gestures (emergency stop)denied

emergency-stop · enforce · 6 actions

0 allow6 denyrisk medium

Web research (budget)requires_approval

tight-budget · enforce · 6 actions

3 allow3 approverisk low

Web form (simulation)requires_approval

default-enforce · simulation · 6 actions

2 allow4 approverisk high

Cross-surface enforcement (POLICY-EXT)74 subjects14 denied34 approve

all computer mcp terminal filesystem

mcp:mcp-researchallowed

default-enforce · enforce · 5 subjects · checksum 5b519d86

5 allow1 secret name

Policy "default-enforce" (enforce) on mcp "mcp-research": 5 allowed, 0 need approval, 0 denied (0 unresolved, fail-closed) → allow. Advisory until the Broker exists.

mcp:mcp-integration-writerequires_approval

default-enforce · enforce · 3 subjects · checksum 384deb07

1 allow2 approve1 destructive3 secret names

Policy "default-enforce" (enforce) on mcp "mcp-integration-write": 1 allowed, 2 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

mcp:mcp-researchdenied

emergency-stop · enforce · 5 subjects · checksum 53221a69

0 allow5 deny1 secret name

Policy "emergency-stop" (enforce) on mcp "mcp-research": 0 allowed, 0 need approval, 5 denied (0 unresolved, fail-closed) → deny. Advisory until the Broker exists.

terminal:terminal-buildrequires_approval

default-enforce · enforce · 6 subjects · checksum ed2ec729

5 allow1 approve2 secret names

Policy "default-enforce" (enforce) on terminal "terminal-build": 5 allowed, 1 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

terminal:terminal-interactivedenied

restricted-analyst · enforce · 6 subjects · checksum dc5f98e9

0 allow6 deny1 secret name

Policy "restricted-analyst" (enforce) on terminal "terminal-interactive": 0 allowed, 0 need approval, 6 denied (0 unresolved, fail-closed) → deny. Advisory until the Broker exists.

filesystem:fs-pipelinerequires_approval

compliance-strict · enforce · 5 subjects · checksum 87f5ebdf

4 allow1 approve

Policy "compliance-strict" (enforce) on filesystem "fs-pipeline": 4 allowed, 1 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

filesystem:fs-archiverequires_approval

restricted-analyst · enforce · 5 subjects · checksum 7a7e823c

0 allow5 approve2 destructive

Policy "restricted-analyst" (enforce) on filesystem "fs-archive": 0 allowed, 5 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

api:api-internal-readallowed

default-enforce · enforce · 1 subject · checksum 8bc16113

1 allow

Policy "default-enforce" (enforce) on api "api-internal-read": 1 allowed, 0 need approval, 0 denied (0 unresolved, fail-closed) → allow. Advisory until the Broker exists.

api:api-write-approvalrequires_approval

default-enforce · enforce · 3 subjects · checksum fc0a8a88

0 allow3 approve1 destructive1 secret name

Policy "default-enforce" (enforce) on api "api-write-approval": 0 allowed, 3 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

api:api-graphqlrequires_approval

default-enforce · enforce · 2 subjects · checksum c2e1549f

1 allow1 approve1 secret name

Policy "default-enforce" (enforce) on api "api-graphql": 1 allowed, 1 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

api:api-webhook-stream-transferrequires_approval

default-enforce · enforce · 4 subjects · checksum f802646e

2 allow2 approve2 secret names

Policy "default-enforce" (enforce) on api "api-webhook-stream-transfer": 2 allowed, 2 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

api:api-write-approvaldenied

emergency-stop · enforce · 3 subjects · checksum 9895bbdf

0 allow3 deny1 destructive1 secret name

Policy "emergency-stop" (enforce) on api "api-write-approval": 0 allowed, 0 need approval, 3 denied (0 unresolved, fail-closed) → deny. Advisory until the Broker exists.

vision:vision-documentrequires_approval

compliance-strict · enforce · 3 subjects · checksum 4fd44ebb

1 allow2 approve

Policy "compliance-strict" (enforce) on vision "vision-document": 1 allowed, 2 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

vision:vision-chartallowed

default-enforce · enforce · 3 subjects · checksum 63163604

3 allow

Policy "default-enforce" (enforce) on vision "vision-chart": 3 allowed, 0 need approval, 0 denied (0 unresolved, fail-closed) → allow. Advisory until the Broker exists.

vision:vision-biometricrequires_approval

restricted-analyst · enforce · 2 subjects · checksum e1b0370c

1 allow1 approve1 destructive

Policy "restricted-analyst" (enforce) on vision "vision-biometric": 1 allowed, 1 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

desktop:desktop-app-controlrequires_approval

default-enforce · enforce · 5 subjects · checksum e885fa6d

0 allow5 approve

Policy "default-enforce" (enforce) on desktop "desktop-app-control": 0 allowed, 5 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

desktop:desktop-inspectallowed

default-enforce · enforce · 1 subject · checksum 218ba1b3

1 allow

Policy "default-enforce" (enforce) on desktop "desktop-inspect": 1 allowed, 0 need approval, 0 denied (0 unresolved, fail-closed) → allow. Advisory until the Broker exists.

desktop:desktop-untrusted-closerequires_approval

restricted-analyst · enforce · 3 subjects · checksum 4b1931a3

0 allow3 approve1 destructive

Policy "restricted-analyst" (enforce) on desktop "desktop-untrusted-close": 0 allowed, 3 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

window:window-multi-displayrequires_approval

default-enforce · enforce · 5 subjects · checksum d1c01f0c

0 allow5 approve

Policy "default-enforce" (enforce) on window "window-multi-display": 0 allowed, 5 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

window:window-inspectallowed

default-enforce · enforce · 1 subject · checksum d8338fac

1 allow

Policy "default-enforce" (enforce) on window "window-inspect": 1 allowed, 0 need approval, 0 denied (0 unresolved, fail-closed) → allow. Advisory until the Broker exists.

window:window-dialogsrequires_approval

restricted-analyst · enforce · 3 subjects · checksum 366efc63

0 allow3 approve1 destructive

Policy "restricted-analyst" (enforce) on window "window-dialogs": 0 allowed, 3 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

The Policy Runtime owns approval rules, RBAC/org permissions, token/monetary budgets, rate limits, compliance regimes, maintenance windows, dry-run/simulation, emergency stop, rollback and secret requirements — and returns decisions only. It never executes. POLICY-EXT (ADR-0079) extends the same kernel to judge MCP, Terminal, and Filesystem sessions as normalized policy subjects; unresolved references fail closed; decisions remain advisory until the future Vault → Approval → Broker chain makes allow binding.