Policy and Metapolicy Engine Architecture

3. Verdict Snapshot v3 and Source Coordinate Space

Normalized Event Pointer Fields

Every governed event in csi_agg_events / csi_audit_unified carries lightweight pointer fields instead of the retired audit.redaction_decisions_json and audit.*_json fields:

Event Field	Populated When	Purpose
audit.edge_verdict_snapshot_state	Always	Snapshot persistence state ("complete", "chunked", or error status).
audit.edge_verdict_snapshot_ref	Single chunk snapshot	Content addressed GSS URI (s3://.../verdict_snapshots/<sha256>.json) for direct console retrieval.
audit.edge_verdict_snapshot_chunks	Multi chunk snapshot	Ordered list of GSS chunk references when a large snapshot spans multiple objects.
audit.edge_verdict_snapshot_sha256	Complete snapshot	Cryptographic SHA256 digest of the canonical Verdict Snapshot v3 JSON body.
audit.governance_verdict	Governed transaction	Summary verdict ("permit", "deny", "clarify", or "transform" when redaction decisions fire).

5. Rego Policy Authoring, Input Envelope, and Metapolicy Combinators

Multi Source Metapolicy Combinators and Redaction Strategies

When a region or message matches multiple source documents (matched_objects), the active object_auth_metapolicy combines their individual verdicts using one of Caber's declarative combinators and emits transformation obligations:

• deny_overrides (Default): Any non stale deny verdict across matched sources yields deny for the overlapping span.
• permit_overrides: Any authoritative permit at the highest active signal tier permits the span unless overridden by a higher priority system or framework policy.
• freshest_wins / freshness_filtered_override: Suppresses STALE_REPLICA and SUPERSEDED source verdicts when the canonical cluster leader (CANONICAL) is present or verified in the freshness graph; blocks pure stale retrieval with STALE_DATA_VIOLATION.
• most_specific_wins: Resolves conflicts using the seven dimensional specificity vector [resource, action, actor, purpose, destination, recipient_class, valid_time], breaking ties in favor of deny.
• most_restrictive_lattice: Computes the supremum sensitivity classification across all matched sources (max(classification_rank)) and unions all redaction obligations.
• Redaction Strategies: Policies can mandate surgical span replacement ([REDACTED] or custom template via by_nmers), JSON key path scrubbing (by_keys[...]), entity specific masking ([REDACTED:SSN], [REDACTED:PHI]), synthetic format preserving token replacement, or full payload block (403 Forbidden / tool output suppression).