Policy versioning

Every change to a policy creates an immutable version, so you can promote, roll back, and prove exactly which rules applied to any past decision.

Immutable versions

Editing a policy never mutates the running rules. Instead it produces a new, immutable version with a unique id. Old versions are retained so historical decisions remain explainable.

Promote & roll back

1

Promote a shadow version to active when you're satisfied with its shadow results.

2

Only one version of a policy is active at a time per binding.

3

Roll back by re-activating any previous version — the switch is atomic and immediate.

Because promotion is just a pointer change, rollback during an incident is instant and risk-free.

Each audit record references the exact policy version that produced its verdict. When an auditor asks "why was this output blocked in March?", you can show the precise rules in force at that moment — not today's rules.

Was this page helpful?