Policy integrity
The policy and every profile parse, declare version 1, and carry no key the schema does not define.
blocking A violation stops the command with exit 10.
The chain
A rule is enforced only when every link below holds. majordomus doctor resolves each one from the source on every run; this page shows what it resolved.
- 1 Declared majordomus.policy-integrity
- 2 Validator mj_validate_policy
- 3 Runs under doctor, watch
- 4 On violation exit 10
- 5 Proved by test/cases/02_doctor_basic.sh
- 6 Run by CI .github/workflows/validate.yml
Where it runs
- majordomus doctorIt checks governance only: is Majordomus itself healthy, and is every enforcement it declares actually wired here?
- majordomus watchWhat has drifted since the last update — policy, projections, state, retention.
What it lets us promise
- guaranteed The canonical policy is parsed and rejected if it contains an unknown key
- guaranteed Every profile is parsed, its unknown keys rejected, and the default profile proven to exist
Read it here
majordomus doctrine show majordomus.policy-integrity
majordomus check --rule majordomus.policy-integrity