Operations Surface

Policy Rules

Every action crosses policy first. Tenant-specific guardrails live here, not inside prompt text.

RuleEffectPriorityScopeConditions
No delete by default
deny
10
{
  "actions": [
    "delete"
  ]
}
{}
Price change up to 5%
allow
20
{
  "actions": [
    "change_price"
  ]
}
{
  "maxChangePercent": 5
}
Manual approval for destructive workflows
require_approval
30
{
  "actions": [
    "workflow_execute"
  ]
}
{
  "changePercentAbove": 5
}