type: "Stack layer"
title: "Policy enforcement"
description: "Decoupling policy decisions from enforcement points across the stack."
tags: [stack, policy, governance]
generated: { by: human:crpage, at: 2026-07-09T09:44:00Z }
status: stable

Role in the stack

Guardrails belong in infrastructure, decoupled from model-generated reasoning. Policy-as-code — notably OPA — separates the decision from the enforcement point and can run across microservices, API gateways, CI/CD and Kubernetes. Log policy decisions independently of the model's rationale.

Relates to: Identity and authorisation, Observability and provenance.

Terms

Glossary terms used here: Policy-as-code, Provenance.