Skip to main content
Version: latest (master)

Type Alias: EnforcementMode

EnforcementMode = "enforce" | "observe" | "disabled"

Defined in: src/types/enforcement-mode.ts:13

Per-agent governance posture sent to the gateway at registration.

Mirrors aa_core::EnforcementMode on the wire; the snake_case tokens are what the gateway's REST endpoint expects and what its REST → gRPC bridge maps onto RegisterRequest.enforcement_mode (proto enum).

  • "enforce" — default; deny blocks the action, redact strips secrets.
  • "observe" — dry-run; the gateway records what would have happened but lets every action through. Surfaced by aa audit list --dry-run-only.
  • "disabled" — policy evaluation skipped entirely. Hermetic test only.