Overview

Policy Guard integrates with Open Policy Agent (OPA) to enforce compliance policies across all Aegis Sovereign resources. Policy bundles are stored in a connected Git repository and synced to the platform on push — the gitops.bundle.synced webhook fires on successful sync.

Policy Center — OPA/Rego policy bundles with pass/fail evaluation verdicts, violation drill-downs, and git sync.

Policy Definitions

Write Rego policies to enforce governance rules.

bash

Rego policy

1# policy/enforce_encryption.rego
2package sovereign.policies
3
4default allow = false
5
6allow {
7    input.resource.encryption == "aes256-gcm"
8    input.resource.tls_version >= "1.3"
9}