How policies work
Executable governance controls that decide what each action may do.
Updated October 2026 · 1 min read
Policies are executable governance controls. They are not documents that people read; the runtime evaluates them for each action.
- Policies belong to a workspace.
- An action that matches no policy is blocked by default.
- A policy can lead to ALLOW, BLOCK or ESCALATE for the actions it covers.
Tip: Because the default is BLOCK, an empty workspace never allows anything. Add policies deliberately and test them with your own actions.