Documentation
Documentation
Architecture, policy model, enforcement semantics, and operational guarantees for execution-layer governance.
What This Covers
Runtime governance concepts
Enforcement boundary and decision flow
Policy model and evaluation semantics
Audit trail and chain of custody
Operational guarantees and failure handling
Core Concepts
Runtime Supervisor
The enforcement layer that intercepts and evaluates every agent action before execution.
Enforcement Boundary
The point at which policy decisions are made and authority is granted or denied.
Deterministic Policy Evaluation
Policies are evaluated synchronously with consistent, reproducible outcomes.
Audit Chain
Cryptographic record of all decisions, actions, and state changes for review and attestation.
Deny-by-Default
No implicit permissions. Every action requires explicit policy authorization.
Policy Model
Illustrative policy example. This is not installation or setup guidance.
policy "agent_network_access" {
default = "deny"
identity {
require_attestation = true
allowed_issuers = ["internal-ca.vallignus.io"]
}
network {
allow = [
"api.internal.corp:443",
"telemetry.vallignus.io:443"
]
}
execution {
max_runtime_seconds = 300
terminate_on_policy_violation = true
audit_all_actions = true
}
}Guarantees
Deny-by-default posture
Synchronous enforcement at execution time
Forced termination on violation
Cryptographic audit trail suitable for review and attestation
No implicit trust inheritance across tasks
Evaluating Vallignus for enterprise or government use?