Policy Engine

# List configured policies
praisonai policy list

praisonai policy list

╭─ Configured Policies ────────────────────────────────────────────────────────╮
│  🛡️ no_delete - Block delete operations (priority: 100)                     │
│  🛡️ read_only - Allow only read operations (priority: 50)                   │
╰──────────────────────────────────────────────────────────────────────────────╯

praisonai policy check "tool:delete_file"

praisonai policy check "net:api.example.com"

praisonai policy init

from praisonaiagents.policy import (
    PolicyEngine, Policy, PolicyRule, PolicyAction, create_network_policy
)

engine = PolicyEngine()

policy = Policy(
    name="no_delete",
    rules=[
        PolicyRule(
            action=PolicyAction.DENY,
            resource="tool:delete_*",
            reason="Delete operations blocked"
        )
    ]
)
engine.add_policy(policy)

result = engine.check("tool:delete_file", {})
print(f"Allowed: {result.allowed}")

# Gate outbound requests by destination host
engine.add_policy(create_network_policy(
    allow_hosts=["api.mycorp.com"],
    deny_hosts=["169.254.169.254"],  # block cloud metadata
))
print(engine.check_network("api.mycorp.com").allowed)      # True
print(engine.check_network("169.254.169.254").allowed)     # False