Policy Enforcement

Kind: mechanism

Layer: Security Core

Record: architecture:policy-enforcement

Severity: mandatory

Scope: code, infrastructure, runtime

Canonical: Ontology

A mechanism that blocks an action a policy forbids at the point the action is attempted.

Listed in Architecture principles, after Governance and before Policy as Code.

Requires

• Defined Policy

Reinforces

• Compliance
• Security

Enables

• Automated Control

Conflicts with

• Manual-Only Review

In tension with

• False Positives

Tensions

• Policy Enforcement / False Positives

Violated by

• Manual-Only Governance

Refactored by

• Policy as Code
• Fitness Functions

Severity

• mandatory

Category

• Security / Privacy / Compliance / Governance

Refactors

• Authorization

Linked from

• The gate holds the line
• The author is probabilistic
• Security / Privacy / Compliance / Governance
• Core Vocabulary
• Quality Attributes
• Security Privacy Compliance
• Severity levels
• The resolutions

in this codebase

• rules/eslint/closure-rule-shape.eslint.rule.ts
• stagesFor
• runStages