Policy Explorer

The OS security kernel: given an approved computer plan, should each action be permitted? Advisory decisions only — the runtime executes nothing. Read-only.

Evaluations

Actions judged

Need approval

Denied

Web research (allow)allowed

default-enforce · enforce · 6 actions

6 allowrisk low

Web form (approval)requires_approval

default-enforce · enforce · 6 actions

2 allow4 approverisk high

Terminal (RBAC deny)denied

restricted-analyst · enforce · 3 actions

1 allow2 denyrisk critical

Filesystem (compliance)requires_approval

compliance-strict · enforce · 4 actions

2 allow2 approverisk high

Desktop (dry-run)requires_approval

default-enforce · dry_run · 5 actions

2 allow3 approverisk high

Vision + OCR (allow)allowed

default-enforce · enforce · 4 actions

4 allowrisk low

Input gestures (emergency stop)denied

emergency-stop · enforce · 6 actions

0 allow6 denyrisk medium

Web research (budget)requires_approval

tight-budget · enforce · 6 actions

3 allow3 approverisk low

Web form (simulation)requires_approval

default-enforce · simulation · 6 actions

2 allow4 approverisk high

Cross-surface enforcement (POLICY-EXT)74 subjects14 denied34 approve

all computer mcp terminal filesystem

mcp:mcp-researchallowed

default-enforce · enforce · 5 subjects · checksum 5b519d86

5 allow1 secret name

Policy "default-enforce" (enforce) on mcp "mcp-research": 5 allowed, 0 need approval, 0 denied (0 unresolved, fail-closed) → allow. Advisory until the Broker exists.

mcp:mcp-integration-writerequires_approval

default-enforce · enforce · 3 subjects · checksum 384deb07

1 allow2 approve1 destructive3 secret names

Policy "default-enforce" (enforce) on mcp "mcp-integration-write": 1 allowed, 2 need approval, 0 denied (0 unresolved, fail-closed) → requires_approval. Advisory until the Broker exists.

mcp:mcp-researchdenied

emergency-stop · enforce · 5 subjects · checksum 53221a69

0 allow5 deny1 secret name

Policy "emergency-stop" (enforce) on mcp "mcp-research": 0 allowed, 0 need approval, 5 denied (0 unresolved, fail-closed) → deny. Advisory until the Broker exists.

The Policy Runtime owns approval rules, RBAC/org permissions, token/monetary budgets, rate limits, compliance regimes, maintenance windows, dry-run/simulation, emergency stop, rollback and secret requirements — and returns decisions only. It never executes. POLICY-EXT (ADR-0079) extends the same kernel to judge MCP, Terminal, and Filesystem sessions as normalized policy subjects; unresolved references fail closed; decisions remain advisory until the future Vault → Approval → Broker chain makes allow binding.