AGENTS.md

1# SDP Policy Runtime — v1 Contract
2 
3## Context Objects
4- `Decision`: Primary output (Allowed bool, Explanation ExplainResult)
5- `ExplainResult`: Human-readable rationale via ExplainMode (Basic/Detailed/Internal)
6 
7## Dependencies
8- `internal/evidence`: CodingWorkflowStatement, DiscrepancyReport (wrapped in EvidenceInput)
9- **Risk**: Evidence schema changes break policy API
10- Stdlib only: context, encoding/json, fmt, strings
11 
12## Configuration
13Discrepancy thresholds (GateConfig):
14- Critical: 0, High: 0, Medium: 5, Low: 20
15 
16Attestation:
17- RequireSignedAttestation: true (default)
18- Verify via evidence.NewSigner().VerifyAttestation()
19 
20## Evaluation Contract
21- **Ordering**: Severity descending (Critical→High→Medium→Low) for determinism
22- **Short-circuit**: Stop on first deny
23- **Override hooks**: Post-evaluation, can flip deny→allow with audit
24 
25## Runtime Assumptions
26- Context propagation: No specific keys required
27- Audit: AuditFields() returns status, reasons, severity counts, thresholds
28- Errors: Return nil Decision + error; verification/threshold violations deny with message
29 
30## Versioning
31- v1.0.0 stable for SDP runtime integration
32- Evidence changes require policy contract review
33