Open Agent OS

Policy Bundles

Section 25 — Evaluation Order (Fixed)

Lower number evaluated first. Explicit Deny overrides Personal Delegation.

1Explicit Deny
2Security Boundary
3Personal Delegation
4Persistent Grant
5Group Grant
6Default Bundle
7JIT Approval
8Default Deny
Explicit Deny is evaluated before Personal Delegation and overrides it
Personal Delegation override — may be blocked by Explicit Deny

Within same source: lower priority → id alphabetical. resource_pattern matched via fnmatch glob.

Loading...

Data: GET /v1/policy/bundles (security policy_engine proxy). JWT required. Scroll horizontally on 375px.