Trust Policies

Declarative rules for anchoring, revocation, escalation, and PII handling. Every policy edit is itself anchored to the ledger.

Active policies

6 rules · 2 draft

Auto-anchor SAP audit events

when erp.sap.audit.* → do anchor + notify

v1.4

Revoke expired GxP credentials

when credential.expiring → do revoke + email holder

v1.4

Freeze on 3+ tamper alerts

when tamper.count > 3 in 1h → do pager · pause ingestion

v1.4

Redact PII before hashing

when payload.contains(PII) → do keyed BLAKE3

v1.4

Multi-party sign on batch release

when event = BATCH_RELEASE_APPROVED → do require 2 signers

v1.4

Recall alert to supply partners

when recall.published → do webhook · 42 partners

v1.4

Policy DSL

human-readable · Git-tracked

policy "auto-anchor-sap" {
  when   erp.sap.audit.*
  filter payload.severity >= "medium"
  then   anchor(module="audit-logs", key="audit-anchor-01")
         notify(slack="#compliance-live")
  audit  self.anchor  # this policy is itself anchored
}

policy "revoke-expired-gxp" {
  when   credential.expiring within "7 days"
  then   revoke.on_expire()
         email(template="cred-expiry", to=holder.email)
}

Policy change log

immutable · anchored

Enabled recall webhook broadcast

sarah.h

2025-07-14

Rotated redaction salt

security.admin

2025-07-08

Added 3+ tamper freeze rule

sarah.h

2025-06-30

Draft: dual-signer batch release

compliance.lead

2025-06-14