Skip to main content

Crate converge_policy

Crate converge_policy 

Source
Expand description

§converge-policy

Cedar-based policy enforcement as Suggestors for the Converge Engine.

Policy gates participate INSIDE the convergence loop — they evaluate proposals against Cedar policies and write constraints for violations.

§Usage

use converge_policy::{PolicyGateSuggestor, PolicyEngine};
use std::sync::Arc;

let engine = PolicyEngine::from_policy_str(EXPENSE_APPROVAL_POLICY)?;
let gate = PolicyGateSuggestor::new(Arc::new(engine));
converge_engine.register_suggestor(gate);

§Available Suggestors

Re-exports§

pub use engine::PolicyEngine;
pub use suggestor::ApprovalGateSuggestor;
pub use suggestor::BudgetGateSuggestor;
pub use suggestor::ComplianceCondition;
pub use suggestor::ComplianceGateSuggestor;
pub use suggestor::ComplianceRule;
pub use suggestor::DataClassificationGateSuggestor;
pub use suggestor::DelegationVerifySuggestor;
pub use suggestor::FlowGateSuggestor;
pub use suggestor::PolicyGateSuggestor;
pub use suggestor::RateLimitGateSuggestor;
pub use types::ContextIn;
pub use types::DecideRequest;
pub use types::PrincipalIn;
pub use types::ResourceIn;
pub use decision::PolicyDecision;
pub use decision::PolicyOutcome;
pub use delegation::Delegation;

Modules§

decision
Policy decision types aligned with converge-core’s gate model.
delegation
Delegation tokens — scoped, time-limited authority grants.
engine
Cedar policy evaluation engine.
flow
Cedar implementation of the neutral flow gate contract from converge-core.
suggestor
types
Domain types for policy decisions.

Structs§

FlowGateDecision
Full gate decision with rationale and source attribution.
FlowGateInput
Canonical input to an authorization decision for a flow gate.

Enums§

FlowAction
Action being attempted against a converging flow.
FlowGateError
Pure error surface for flow gate authorization.
FlowGateOutcome
Neutral outcome of a flow gate authorization decision.

Constants§

EXPENSE_APPROVAL_POLICY
Built-in Cedar policies for reference and testing.
FLOW_GOVERNANCE_POLICY
VENDOR_SELECTION_POLICY

Traits§

FlowGateAuthorizer
Deterministic decision provider for consequential flow actions.