What can refuse an effect before the policy

What can refuse an effect before the policy An architecture diagram generated by Archify. poly-runtime · load and dispatch · Architecture component poly-runtime load and dispatch Effect worker · outbox to gate to handler · Architecture component Effect worker outbox to gate to handler Memory and flow · taint and freshness · Architecture component Memory and flow taint and freshness Decisions and routing · providers and budgets · Architecture component Decisions and routing providers and budgets host the effect worker memory check callback decision callback Legend Backend

The short answer

  • • The worker applies origin, memory, budget, grant and mandate checks first, each from the runtime, and each final whatever a policy says

Not shown here

  • • The engine itself and the ledger
  • • Connected but out of scope: Workflow server, Certified build, Certificate format, Signed records, sam-pattern 2.3.0, polygraph 8.4.0

Doctrine

  • • An effect meets five refusals before the policy engine decides: origin, memory, budget, grant and mandate each refuse or escalate finally whatever a policy says; only then does the Polyaxion gate propose