Policy and enforcement
Declaring rules, proving they are wired, and reproducing a finding.
Declaring rules, proving they are wired, and reproducing a finding.
- use cases
- 5
- executable
- 1
- guaranteed
- 4
-
guaranteed basic
Gate CI on the tool itself, with an exit code that is a contract
Run the checks CI runs, read every finding with the command that reproduces it, and rely on exit codes that mean one thing each: no code means warn and continue.
doctor · watch · doctrine · check -
executable intermediate
Divide a working tree into commits, and hold every message to a policy
Ask what this tree would commit and why, learn the scope vocabulary from the history rather than a table, and get a verdict on one message or on a whole range before a reviewer has to give one.
doctrine -
guaranteed intermediate
Prove a rule is actually enforced, not merely written down
Answer "is this rule real?" with a command rather than a reading of the source.
doctrine · doctor · check -
guaranteed basic
See which rules apply here and what enforces them
List the effective rule set, read one rule as the tool reads it, and see which of them the tool enforces and from where.
rules · doctrine -
guaranteed basic
Trust the policy and the profiles only after they are validated
Prove that the canonical policy parses with every key it needs declared, that every profile parses and the default exists, and that what the policy declares as enforced is what actually runs.
doctor · check