Class AsiBackbonePolicyEvaluatorOptions

Namespace

AsiBackbone.Core.Evaluation

Assembly

AsiBackbone.Core.dll

Provides host-configurable options for the default AsiBackbone policy evaluator.

public sealed class AsiBackbonePolicyEvaluatorOptions

Inheritance

object

AsiBackbonePolicyEvaluatorOptions

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Remarks

Options remain mutable while a host is configuring them. The default evaluator validates and freezes the supplied instance during construction so later caller mutation cannot change evaluator behavior. Configure a separate options instance for each evaluator posture that must differ.

Fields

DefaultConstraintExceptionReasonCode

Gets the default machine-readable reason code used when constraint exception evaluation denies execution.

public const string DefaultConstraintExceptionReasonCode = "asibackbone.policy.constraint_exception"

Field Value

string

DefaultNoConstraintsReasonCode

Gets the default machine-readable reason code used when strict empty-policy evaluation denies execution.

public const string DefaultNoConstraintsReasonCode = "asibackbone.policy.no_constraints"

Field Value

string

DefaultThreatContributorExceptionReasonCode

Gets the default machine-readable reason code used when threat contributor exception evaluation denies execution.

public const string DefaultThreatContributorExceptionReasonCode = "asibackbone.threat.contributor_exception"

Field Value

string

Properties

ConstraintExceptionReasonCode

Gets or sets the machine-readable reason code used when TreatConstraintExceptionAsDenial denies a constraint exception.

public string ConstraintExceptionReasonCode { get; set; }

Property Value

string

ConstraintExceptionReasonMessage

Gets or sets the reason message used when TreatConstraintExceptionAsDenial denies a constraint exception.

public string ConstraintExceptionReasonMessage { get; set; }

Property Value

string

DenyWhenNoConstraints

Gets or sets a value indicating whether evaluation should deny when no constraints are registered or supplied.

public bool DenyWhenNoConstraints { get; set; }

Property Value

bool

NoConstraintsReasonCode

Gets or sets the machine-readable reason code used when DenyWhenNoConstraints denies an empty policy.

public string NoConstraintsReasonCode { get; set; }

Property Value

string

NoConstraintsReasonMessage

Gets or sets the reason message used when DenyWhenNoConstraints denies an empty policy.

public string NoConstraintsReasonMessage { get; set; }

Property Value

string

PreventThreatAssessmentAllowDowngrade

Gets or sets a value indicating whether threat assessment outcomes should be protected from being downgraded to pure allow decisions.

public bool PreventThreatAssessmentAllowDowngrade { get; set; }

Property Value

bool

ShortCircuitOnFirstDenial

Gets or sets a value indicating whether evaluation should stop after the first denied constraint result.

public bool ShortCircuitOnFirstDenial { get; set; }

Property Value

bool

ThreatContributorExceptionReasonCode

Gets or sets the machine-readable reason code used when TreatThreatContributorExceptionAsDenial denies a contributor exception.

public string ThreatContributorExceptionReasonCode { get; set; }

Property Value

string

ThreatContributorExceptionReasonMessage

Gets or sets the reason message used when TreatThreatContributorExceptionAsDenial denies a contributor exception.

public string ThreatContributorExceptionReasonMessage { get; set; }

Property Value

string

TreatConstraintExceptionAsDenial

Gets or sets a value indicating whether constraint exceptions should be converted into denied governance decisions.

public bool TreatConstraintExceptionAsDenial { get; set; }

Property Value

bool

TreatThreatContributorExceptionAsDenial

Gets or sets a value indicating whether threat contributor exceptions should be converted into denied governance decisions.

public bool TreatThreatContributorExceptionAsDenial { get; set; }

Property Value

bool

Methods

Validate()

Validates evaluator options and freezes the instance for evaluator use.

public void Validate()

Remarks

The method is idempotent. After successful validation, attempts to change any option throw an InvalidOperationException so a constructed evaluator cannot observe configuration drift.