15 lines
476 B
Markdown
15 lines
476 B
Markdown
# Policy Directory
|
|
|
|
Policy files are authoritative constraints for ThreeGate components.
|
|
|
|
## Rules
|
|
- Policy files must be mounted read-only into containers.
|
|
- Policies must not be editable by any component at runtime.
|
|
- Changes are operator actions and should be version-controlled.
|
|
|
|
## Files
|
|
- `instruction-hierarchy.md`: global instruction precedence
|
|
- `core.policy.md`: CORE constraints
|
|
- `fetch.policy.md`: FETCH constraints
|
|
- `tool-exec.policy.md`: TOOL-EXEC constraints
|