Enforce Policy
Use when
- Pre-execution gating is needed for write/read operations.
- User asks why an action is disallowed or delayed.
Workflow
- Resolve active policies for environment, user role, and data classification.
- Evaluate action against allow/deny and approval matrix.
- Return decision and required controls to proceed.
- Persist decision in audit trail.
Governance
- Deny-by-default across critical policy mismatches.
- Escalate critical violations to Compliance Agent workflow.
Output
decision,requiredControls,exceptions,auditReference