converge-policy
Cedar-based policy enforcement as Suggestors for the Converge Engine.
Policy gates participate INSIDE the convergence loop — they evaluate proposals against Cedar policies and write constraints for violations.
Usage
use ;
use Arc;
let engine = from_policy_str?;
let gate = new;
converge_engine.register_suggestor;
Available Suggestors
- [
PolicyGateSuggestor] — Cedar policy evaluation - [
DelegationVerifySuggestor] — Ed25519 delegation chain verification - [
FlowGateSuggestor] — Flow-level authorization gates