+
Policies
+ Mockup • proposed design
+
+
+
{ICON}Evaluation
+
Environment
+
+
+
{ICON}Policies 4
+ Archived
+ Tags{CHEV} Sort{CHEV}
+{policy_rows()}
+
+
Policies are created and updated with the CLI or API
+ (kosli create policy --type rego). In the beta the UI is read-only,
+ apart from tagging.
+
Every pull request on the trail has at least one approver.
+
+
+
pr-approval-decision
+ {CROSS}Non-compliant
+ ✕
+
V1
+ requested 2026-07-27 • 13:41:55· recorded 13:42:02Mockup • proposed design
+
+
+
Evaluation context evc_7f31a92c
+ view
+
Control RCTL-043
+ — Source code review
+
Trail my-release-flow / release-97
+
Artifact {ECR}/nginx:a6e433asha256:a6e433a6fd3eb29c499b75310756420864b6c346
+
Policy pr-approved V1 digest
+ sha256:9f2c1d84e0b7a35c6f1e8d2b47a90c3518fe64d7
+
Parameters {{ "pr_attestation_name": "pull-request" }}
+
Evaluation engine opa 1.18.2
+ Violations
+ pull-request https://github.com/cyber-dojo/nginx/pull/42 has no approvers
+ pull-request https://github.com/cyber-dojo/nginx/pull/45 has no approvers
+
Evaluation report ↓ evaluation-report.json
+
+
{ICON}Policy bundle
+ V1 · current{CHEV}
+ Copy
+ ↓ bundle
+
+ Bundle sha256:9f2c1d84…
+ roots policy
+ entrypoint policy.allow
+ schema trail
+ params read pr_attestation_name
+ published 2026-07-20 by alex@kosli.com
+
+
+{FILES}
+
+
policy.rego
+ entrypoint
+ sha256:9f2c1d84… · {nlines} lines
+
{gutter}
{highlight(REGO)}
+
+
+
The bundle is read-only here. Edit it in your repository and publish a new
+ version with kosli create policy — the version shown is the one that runs
+ when an evaluation names this policy. Tests are stored with the bundle for audit but are not
+ executed server-side.
"""
+
+source_body = f' 
+