glaz

type Action ¶

type Action struct {
	Type       string
	Message    string
	ParamsJSON string
	Gating     bool
}

Action is something a decision demands of the call site, which carries it out itself. Type is the action kind, "block" being the only one the engine synthesizes today.

Gating says whether the action gates the operation. GLAZ stamps it, so a call site never infers it from Type and an action type this binding has never seen still gates correctly.

type Decision ¶

type Decision struct {
	Actions       []*Action
	Reasons       []*Reason
	EvaluationErr *EvaluationError
}

Decision is the outcome of one evaluation: what to enforce (Actions), why (Reasons), and, when the engine could not evaluate at all, the failure that prevented it.

func (d *Decision) Verdict() Verdict

type EvaluationError ¶

type EvaluationError struct {
	Message string
}

EvaluationError is the engine reporting that it could not evaluate: an invalid policy, an oversized document, an exhausted time budget, a result shape it does not recognize.

It travels in-band on Decision rather than as an error from Evaluate because GOVERN-001 wants a call site to journal it and fail closed, not to retry it. Faults that say nothing about the policy stay Go errors from Evaluate.

func (e *EvaluationError) Error() string

type Reason ¶

type Reason struct {
	Message     string
	DetailsJSON string
}

Reason is one explanation for why a policy matched: one entry per violation/deny element the policy produced.

type Verdict ¶

type Verdict string

Verdict is the gating outcome of an evaluation.

GOVERN-001 derives the verdict from the decision rather than carrying it on the wire, so that a verdict and its actions can never disagree. Only VerdictAllow lets an operation proceed; a call site fails closed on anything else.

const (
	// VerdictAllow means no policy demanded anything of this operation.
	VerdictAllow Verdict = "allow"
	// VerdictDeny means a policy demanded something that gates the operation.
	VerdictDeny Verdict = "deny"
	// VerdictUndecidable means the engine could not evaluate, so nothing is
	// known about the operation and it must not proceed.
	VerdictUndecidable Verdict = "undecidable"
)