# Policy Enforcement

Record: `arch:policy-enforcement`
Kind: mechanism
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Severity: mandatory
Scope: code, infrastructure, runtime
Canonical: https://banes-lab.com/ontology#arch-policy-enforcement

## Repair

- Refactored by: Codify Policy, Add Gate
- Detected by: policy drift
- Violated by: unenforced policy
- Measured by: policy violation count
- Enforced by: CI/CD, runtime policy engine

## requires

- [Defined Policy](https://banes-lab.com/records/lex/defined-policy.md)

## reinforces

- [Compliance](https://banes-lab.com/records/arch/compliance.md)
- [Security](https://banes-lab.com/records/lex/security.md)

## enables

- [Automated Control](https://banes-lab.com/records/lex/automated-control.md)

## conflicts-with

- [Manual-Only Review](https://banes-lab.com/records/lex/manual-only-review.md)

## tensions-with

- [False Positives](https://banes-lab.com/records/lex/false-positives.md)

## tensions

- [Policy Enforcement False Positives](https://banes-lab.com/records/tension/false-positives-policy-enforcement.md)