Policy and enforcement
Declaring rules, proving they are wired, and reproducing a finding.
Declaring rules, proving they are wired, and reproducing a finding.
- use cases
- 4
- described
- 4
-
described basic
Gate CI on the tool itself, with an exit code that is a contract
Run the checks CI runs, read every finding with the command that reproduces it, and rely on exit codes that mean one thing each: no code means warn and continue.
doctor · watch · doctrine · check -
described intermediate
Prove a rule is actually enforced, not merely written down
Answer "is this rule real?" with a command rather than a reading of the source.
doctrine · doctor · check -
described basic
See which rules apply here and what enforces them
List the effective rule set, read one rule as the tool reads it, and see which of them the tool enforces and from where.
rules · doctrine -
described basic
Trust the policy and the profiles only after they are validated
Prove that the canonical policy parses with every key it needs declared, that every profile parses and the default exists, and that what the policy declares as enforced is what actually runs.
doctor · check