Experimental
Schema
PolicyLayer
Type:
string
PolicyLayer identifies where an effective rule came from. ORG and OWNER are the two governance scopes; exactly one governs a caller, so a conforming effective view never mixes them.
Values: unspecified: unspecified means the layer is unknown or not reported. org: org is org-level governance policy. owner: owner is owner-level governance policy. kit: kit is the sandbox-scoped policy a kit contributes. attached: attached is a governance policy bound to the sandbox: an inline document or a referenced policy id, materialized and bound by the governance plane at create. gateway: gateway is an enforced runtime-owned gateway policy contribution, not a backend service-route exemption. default: default is an explicit installed default-policy contribution, not a substitute for unknown provenance or an owner-level policy.
All schema constraints and annotations
{
"description": "PolicyLayer identifies where an effective rule came from. ORG and OWNER are\nthe two governance scopes; exactly one governs a caller, so a conforming effective view never mixes them.\n\nValues:\nunspecified: unspecified means the layer is unknown or not reported.\norg: org is org-level governance policy.\nowner: owner is owner-level governance policy.\nkit: kit is the sandbox-scoped policy a kit contributes.\nattached: attached is a governance policy bound to the sandbox: an inline document or a referenced policy id, materialized and bound by the governance plane at create.\ngateway: gateway is an enforced runtime-owned gateway policy contribution, not a backend service-route exemption.\ndefault: default is an explicit installed default-policy contribution, not a substitute for unknown provenance or an owner-level policy.",
"enum": [
"unspecified",
"org",
"owner",
"kit",
"attached",
"gateway",
"default"
],
"title": "PolicyLayer",
"type": "string"
}