Release Decisions
Convert runner findings into pass, fail, block, review, approval, and waiver decisions.
Decision Model
Release decisions convert normalized findings into one answer: can this agent release ship? The decision attaches to a release candidate, not just a single run.
| Decision | Meaning |
|---|---|
passed | All configured gates passed. |
failed | At least one fail gate needs remediation or waiver. |
blocked | A blocker prevents release under policy. |
needs_review | Human review is required before release. |
approved | A reviewer accepted the evidence and release can ship. |
waived | A reviewer accepted specific risk for a scoped time or release. |
Do not hide waivers
A waiver is a decision with scope, owner, reason, and expiration. It is not a silent pass.
Gate Examples
| Gate | Engine | Default decision |
|---|---|---|
| Tenant scope required | PolicyStrata | blocked |
| PII minimization failed | PolicyStrata | blocked |
| SQL/RLS drift detected | PolicyStrata | blocked |
| Stale source dependency | DocPull | needs_review |
| Missing citation coverage | DocPull | failed |
| Policy suite unavailable | Runner | failed |
Gate Configuration
block:
- tenant_scope_required
- pii_minimization_failed
- rls_drift
fail:
- missing_citation
- source_unavailable
review:
- stale_context
- low_confidence_witness
waiver:
requires:
owner: true
reason: true
expiresAt: true