Active Policies

Manage your confidence-aware authorization rules. Policies are written in Rego and evaluated by the Lelu Engine.

auth.rego

Deployed

package lelu.auth

import future.keywords.in

# Default deny
default allow = false
default require_approval = false

# ---------------------------------------------------------
# High Confidence: Auto-Approve
# ---------------------------------------------------------
allow {
    input.action == "execute_trade"
    input.confidence >= 0.95
    input.risk_level == "low"
}

allow {
    input.action == "read_data"
    input.confidence >= 0.80
}

# ---------------------------------------------------------
# Medium Confidence: Require Human Approval
# ---------------------------------------------------------
require_approval {
    input.action == "execute_trade"
    input.confidence < 0.95
    input.confidence >= 0.70
}

require_approval {
    input.action == "execute_trade"
    input.risk_level == "high"
}

# ---------------------------------------------------------
# Low Confidence: Auto-Deny (Implicit via default)
# ---------------------------------------------------------