Policy Configuration

Policies define the rules that govern when human approval is required. You configure them in the SilentAuth dashboard or via the Management API. Each policy rule matches one or more actions and specifies the approval requirements.

Policy Structure

{
  "name": "Production Safeguards",
  "rules": [
    {
      "match": { "action": "deploy_production" },
      "require_approval": true,
      "approvers": ["ops-team"],
      "min_approvals": 1,
      "timeout": 1800
    },
    {
      "match": { "action": "delete_*" },
      "require_approval": true,
      "approvers": ["admin@acme.io"],
      "min_approvals": 2,
      "timeout": 3600
    },
    {
      "match": { "action": "deploy_staging" },
      "require_approval": false  // auto-approve
    }
  ]
}

Match Patterns

Approver Types

Policy Management

Open Preview policies are managed in the dashboard. The Management API shape below is the planned server-side contract for teams that want to manage policy as code.

PUT /api/projects/{projectId}/policies
Authorization: Bearer sk_live_xxx

{
  "rules": [
    {
      "match": { "action": "deploy_production" },
      "require_approval": true,
      "approvers": ["ops-team"],
      "timeout": 1800
    }
  ]
}