Expand description
§converge-policy
Cedar-based policy enforcement as Suggestors for the Converge Engine.
Policy gates participate INSIDE the convergence loop — they evaluate proposals against Cedar policies and write constraints for violations.
§Usage
ⓘ
use converge_policy::{PolicyGateSuggestor, PolicyEngine};
use std::sync::Arc;
let engine = PolicyEngine::from_policy_str(EXPENSE_APPROVAL_POLICY)?;
let gate = PolicyGateSuggestor::new(Arc::new(engine));
converge_engine.register_suggestor(gate);§Available Suggestors
PolicyGateSuggestor— Cedar policy evaluationDelegationVerifySuggestor— Ed25519 delegation chain verificationFlowGateSuggestor— Flow-level authorization gates
Re-exports§
pub use engine::PolicyEngine;pub use suggestor::ApprovalGateSuggestor;pub use suggestor::BudgetGateSuggestor;pub use suggestor::ComplianceCondition;pub use suggestor::ComplianceGateSuggestor;pub use suggestor::ComplianceRule;pub use suggestor::DataClassificationGateSuggestor;pub use suggestor::DelegationVerifySuggestor;pub use suggestor::FlowGateSuggestor;pub use suggestor::PolicyGateSuggestor;pub use suggestor::RateLimitGateSuggestor;pub use types::ContextIn;pub use types::DecideRequest;pub use types::PrincipalIn;pub use types::ResourceIn;pub use decision::PolicyDecision;pub use decision::PolicyOutcome;pub use delegation::Delegation;
Modules§
- decision
- Policy decision types aligned with converge-core’s gate model.
- delegation
- Delegation tokens — scoped, time-limited authority grants.
- engine
- Cedar policy evaluation engine.
- flow
- Cedar implementation of the neutral flow gate contract from
converge-core. - suggestor
- types
- Domain types for policy decisions.
Structs§
- Flow
Gate Decision - Full gate decision with rationale and source attribution.
- Flow
Gate Input - Canonical input to an authorization decision for a flow gate.
Enums§
- Flow
Action - Action being attempted against a converging flow.
- Flow
Gate Error - Pure error surface for flow gate authorization.
- Flow
Gate Outcome - Neutral outcome of a flow gate authorization decision.
Constants§
- EXPENSE_
APPROVAL_ POLICY - Built-in Cedar policies for reference and testing.
- FLOW_
GOVERNANCE_ POLICY - VENDOR_
SELECTION_ POLICY
Traits§
- Flow
Gate Authorizer - Deterministic decision provider for consequential flow actions.