Operations Surface
Policy Rules
Every action crosses policy first. Tenant-specific guardrails live here, not inside prompt text.
| Rule | Effect | Priority | Scope | Conditions |
|---|---|---|---|---|
No delete by default | deny | 10 | {
"actions": [
"delete"
]
} | {} |
Price change up to 5% | allow | 20 | {
"actions": [
"change_price"
]
} | {
"maxChangePercent": 5
} |
Manual approval for destructive workflows | require_approval | 30 | {
"actions": [
"workflow_execute"
]
} | {
"changePercentAbove": 5
} |