up

docs/11_DATA_SCHEMAS.md

@@ -120,7 +120,18 @@ rules:
     action: escalate
 ```
 
-Validation is performed by `policy:mapping.yaml` JSON‑Schema embedded in backend.
+Validation is performed by `policy:mapping.yaml` JSON‑Schema embedded in backend.
+
+Canonical schema source: `src/StellaOps.Policy/Schemas/policy-schema@1.json` (embedded into `StellaOps.Policy`).  
+`PolicyValidationCli` (see `src/StellaOps.Policy/PolicyValidationCli.cs`) provides the reusable command handler that the main CLI wires up; in the interim it can be invoked from a short host like:
+
+```csharp
+await new PolicyValidationCli().RunAsync(new PolicyValidationCliOptions
+{
+    Inputs = new[] { "policies/root.yaml" },
+    Strict = true,
+});
+```
 
 ### 4.1 Rego Variant (Advanced – TODO)