# Interface PolicyEvaluation

Result of sandbox policy evaluation.

interface PolicyEvaluation {
allowed: boolean;
reason?: string;
policyId: string;
violations: readonly PolicyViolation[];
configurationWarnings?: readonly string[];
}

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:97

##### Index

### Properties

allowed
reason?
policyId
violations
configurationWarnings?

## Properties

### `Readonly` allowed

allowed: boolean

Whether the operation is allowed.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:99

### `Optional` `Readonly` reason

reason?: string

Denial reason if not allowed.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:101

### `Readonly` policyId

policyId: string

Policy that was applied.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:103

### `Readonly` violations

violations: readonly PolicyViolation[]

Violations found.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:105

### `Optional` `Readonly` configurationWarnings

configurationWarnings?: readonly string[]

Configuration mismatches the executor surfaces to operators — capabilities declared in the policy but unenforceable because the corresponding allowlist is empty (e.g. `process_spawn` set but `allowedCommands: []`). Source: #2428 ask 1. Not security violations; informational only.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:112