Loading…
Concept
Policy as Code
Policy as code makes authority reviewable, diffable and testable like anything else in the repository. The part that is easy to miss is reproducibility: a decision is only defensible later if the policy version, bundle hash and effective window were pinned at the time it was taken.
How do I express authority as code, versioned and reviewable?
Policy as code makes authority reviewable, diffable and testable like anything else in the repository. The part that is easy to miss is reproducibility: a decision is only defensible later if the policy version, bundle hash and effective window were pinned at the time it was taken.
2 patterns answer this
Safe code deployment
A pipeline — or an agent with repo access — ships to production, force-pushes, or runs a migration.
4 executable policies
Policy change review
Someone edits a policy, raises a threshold, or disables a rule.
6 executable policies
From this term to a governed action
- Safe code deploymentThe recurring action behind this term.
- GitHub Deploy Approval GateAn executable policy that implements it.
- Try to break it in the sandboxA real signed verdict, no account.
- Deploy on your surfaceAvailable on 3 platforms today.
- Verify the proof yourselfCheck the signature without trusting us.
- Start in Shadow ModeMeasure on your traffic before enforcing.
Where this fits
Decionis is the deterministic decision layer between intent and execution. This concept is one way in; the architecture behind it is the same in every case.