specs/policy/shared/v0_2/policy library

Classes

PolicyDecision: PolicyDecision
PolicyDecisionStepUp: When decision == "require_step_up", which method to demand.
PolicyInput: The structured input fed to a policy evaluator on every vault/proxy-login, vault/release, and policy/evaluate call.
PolicyInputConsumer: PolicyInputConsumer, generated from its schema.
PolicyInputRequest: PolicyInputRequest, generated from its schema.
PolicyModule: PolicyModule

PolicyDecisionDecision: PolicyDecisionDecision is a closed set of string values defined by this specification's schema.
PolicyDecisionMode: When decision == "allow", whether the maintainer should proxy-login or release-for-fill. Default: proxy.
PolicyDecisionStepUpMethod: PolicyDecisionStepUpMethod is a closed set of string values defined by this specification's schema.
PolicyInputConsumerNetworkClass: PolicyInputConsumerNetworkClass is a closed set of string values defined by this specification's schema.
PolicyInputRequestKind: PolicyInputRequestKind is a closed set of string values defined by this specification's schema.

ConsumerKind = Object?: Discriminator: is this consumer a user-driven Companion or a headless Service?
Ext = Map<String, dynamic>: Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
SiteTarget = Object?: A single binding target for a vault entry. Tagged union over the discriminator kind. A VaultEntry's targets array MAY mix any number of these.