Policy Actions

Rule actions and their runtime behavior.

Available actions

Action	Audit result	Behavior
block	blocked	Deny the action immediately
require_approval	approval_required	Create approval request; action proceeds only after approval
alert	blocked	Block and flag for alerting
redact	blocked	Block with redaction semantics
log	allowed	Allow but log the match
allow	allowed	Explicitly allow the action