The safeguards map / 3.5 Policy engines
Open Policy Agent (OPA)
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A general-purpose policy engine that evaluates Rego policies and returns a decision to the program that asked.
Where it sits
3.5 Policy engines (primary): Answers allow or deny for a request, including an agent's tool call, from Rego policy, as the policy decision point a harness or gateway asks before it acts.
Before the harness runs a tool call, the harness asks OPA, the Policy Decision Point (PDP), for a decision.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- softwareagent
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- an imported policy bundleowner-entered settings
Handoffs
consumes Policy: Rego bundle
produces Runtime records: OPA decision log events
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.