Skip to content

Policy completeness

Every policy value the code reads is declared in the skeleton policy, and no reader carries its own default for one.

blockingA violation stops the command with exit 10.

The chain

A rule is enforced only when every link below holds. majordomus doctor resolves each one from the source on every run; this page shows what it resolved.

  1. 1 Declared majordomus.policy-completeness
  2. 2 Validator mj_validate_policy_defaults
  3. 3 Runs under doctor, watch
  4. 4 On violation exit 10
  5. 5 Proved by test/cases/28_no_hardcoded_values.sh
  6. 6 Run by CI .github/workflows/validate.yml

Where it runs

What it lets us promise

Read it here

read one rule
majordomus doctrine show majordomus.policy-completeness
majordomus check --rule majordomus.policy-completeness