stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
cf5b72974f923126944f4dcd47e85864ebb31a3b
git.stella-ops.org/docs/features/unchecked/policy/anchor-aware-determinization-rules-in-policy-engine.md

2.0 KiB
Raw Blame History

Anchor-Aware Determinization Rules in Policy Engine

Module

Policy

Status

IMPLEMENTED

Description

Determinization rules that are aware of trust anchors, ensuring policy evaluation produces consistent results based on the trust anchor configuration and signal snapshots.

Implementation Details

  • Determinization Gate: src/Policy/StellaOps.Policy.Engine/Gates/Determinization/DeterminizationGate.cs -- determinization gate evaluator
    • DeterminizationGateMetrics.cs -- gate metrics tracking
    • ISignalSnapshotBuilder.cs / SignalSnapshotBuilder.cs -- builds signal snapshots for deterministic evaluation
  • Determinization Policy: src/Policy/StellaOps.Policy.Engine/Policies/DeterminizationPolicy.cs -- determinization policy definition
    • DeterminizationRuleSet.cs -- rule set for determinization
    • IDeterminizationPolicy.cs -- policy interface
  • Determinization Library: src/Policy/__Libraries/StellaOps.Policy.Determinization/ -- core determinization library
    • Models/ -- determinization models
    • Scoring/ -- determinization scoring
    • Evidence/ -- evidence-based determinization
  • DI Registration: src/Policy/StellaOps.Policy.Engine/DependencyInjection/DeterminizationEngineExtensions.cs -- service registration
  • Configuration Endpoints: src/Policy/StellaOps.Policy.Engine/Endpoints/DeterminizationConfigEndpoints.cs -- API for determinization configuration
  • Events: src/Policy/StellaOps.Policy.Engine/Subscriptions/DeterminizationEvents.cs -- determinization event subscriptions

E2E Test Plan

  • Configure determinization rules via API and verify they apply during evaluation
  • Evaluate a policy with signal snapshots and verify deterministic output
  • Change trust anchor configuration and verify determinization rules adapt
  • Run same evaluation twice with identical snapshots and verify identical results
  • Verify determinization metrics are emitted (gate pass/fail counts)
  • Test determinization configuration endpoint returns current rule set