AISOS
03 · Governance
Policy Bundles
Bundle
Core Baseline
active · authored architecture-boardSealed digest
650c3af1caf5c50d17736d5e
content-addressed, immutableRules
10/10
enabled / totalAdmission rules — longest-prefix match, deny by default
| Rule | Semop | Resource | Effect | Floor / ceiling | Grounded | Enabled |
|---|---|---|---|---|---|---|
R-01 operator-instruction-only | sem_infer | model.* | permit | I0 / C2 | — | |
R-04 retrieval-scope-bound | sem_retrieve | kb.* | permit | I0 / C2 | — | |
R-09 restricted-never-public | sem_emit | channel.public-web | permit | I1 / C0 | 0.95 | |
R-10 customer-email-egress | sem_emit | channel.customer-email | permit | I1 / C1 | 0.85 | |
R-11 internal-ui-egress | sem_emit | channel.internal-ui | permit | I1 / C2 | 0.60 | |
R-14 read-only-tool-floor | sem_invoke | tool.search | permit | I0 / C1 | — | |
R-17 financial-effect-integrity-floor | sem_invoke | tool.transfer_funds | permit | I2 / C2 | — | |
R-18 outbound-messaging-floor | sem_invoke | tool.email_send | permit | I2 / C1 | — | |
R-21 memory-write-quarantine | sem_remember | memory.* | permit | I1 / C2 | — | |
R-30 code-execution-denied | sem_invoke | tool.exec_shell | deny | I3 / C0 | — |