Interface PolicyEvaluation

Whether the operation is allowed.

Denial reason if not allowed.

Policy that was applied.

Violations found.

Configuration mismatches the executor surfaces to operators — capabilities declared in the policy but unenforceable because the corresponding allowlist is empty (e.g. process_spawn set but allowedCommands: []). Source: #2428 ask 1. Not security violations; informational only.