policy

Overview ¶

Package policy implements `hadron policy ...` — the standing action-policy chain (cor:acl:040:02, hadron-server #510; CLI #1343). A run may perform an action only if every layer of the chain allows it: org, the user it runs on behalf of, and the App. The server owns every rule; this group explains the chain and authors the caller's own user layer. The org layer is set with `org update --policy`; the App layer only at createApp (cli#63 tracks it).