# Policy Engine

## Purpose
Evaluate deterministic policy and produce verdicts with explain traces.

## Inputs
- SBOM inventory
- Advisories
- VEX evidence
- Reachability

## Outputs
- Verdicts, effective findings, derived VEX

## Data and storage
- PostgreSQL policy schema

## Key dependencies
- Concelier
- Excititor
- Signals

## Notes and boundaries
- Only component that produces derived findings

## Related docs
- docs/modules/policy/architecture.md