https://praxis.fast/policy/dev/Recent content in Praxis Policy Engine Documentation on PraxisHugoenhttps://praxis.fast/policy/dev/vision/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/vision/PPE acts as a reference monitor between an agent and the tools, agents, and data it can access.https://praxis.fast/policy/dev/assertions/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/assertions/SPDX-License-Identifier: Apache-2.0 Copyright (c) 2026 Praxis Contributors –>https://praxis.fast/policy/dev/auditing/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/auditing/SPDX-License-Identifier: Apache-2.0 Copyright (c) 2026 Praxis Contributors –>https://praxis.fast/policy/dev/benchmarks/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/benchmarks/PPE ships a Criterion suite that measures the decision hot path: plugin dispatch, a full route decision, per-PDP evaluation, throughput under concurrency, and heap use per decision.https://praxis.fast/policy/dev/builtins/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/builtins/PPE ships a set of plugins, decision points, and a session store, each behind a Cargo feature.https://praxis.fast/policy/dev/cmf-extensions/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/cmf-extensions/Map typed Common Message Format extensions into the attribute bag that APL policies inspect.https://praxis.fast/policy/dev/cmf/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/cmf/APL evaluates policy against a request in the Common Message Format (CMF).https://praxis.fast/policy/dev/configuration/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/configuration/A PPE configuration is one YAML document. It declares the plugins the process can reach, the cross-cutting wiring, and the policy that decides which of them run for a given operation.https://praxis.fast/policy/dev/crates/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/crates/PPE is a Cargo workspace. Most hosts depend on praxis-policy, the facade, and nothing else: it re-exports the runtime and, behind features, the bundled extensions.https://praxis.fast/policy/dev/deployment/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/deployment/PPE is the enforcement point, but where that point sits is your choice.https://praxis.fast/policy/dev/extensions/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/extensions/Alongside the message, every operation carries typed extensions: the contextual state policy reasons about.https://praxis.fast/policy/dev/overview/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/overview/Understand how PPE evaluates identity and APL policy for each operation, then applies effects before allowing it to reach a backend.https://praxis.fast/policy/dev/identity-claim-mapping/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/identity-claim-mapping/Adding a preset is data-driven; no new mapper implementation or resolver branch is needed.https://praxis.fast/policy/dev/http-routing/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/http-routing/Most routes select an operation by name: a tool:, a resource:, a prompt:, an llm:.https://praxis.fast/policy/dev/identity-delegation/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/identity-delegation/PPE resolves the inbound caller and mints the outbound credential on every request.https://praxis.fast/policy/dev/llm-routes/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/llm-routes/An llm: route selects an inference call by model and authorizes it twice: before the request reaches the model, and after the model answers but before the caller sees the answer.https://praxis.fast/policy/dev/patterns/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/patterns/These production patterns cover APL authoring and rollout.https://praxis.fast/policy/dev/pipeline/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/pipeline/APL defines policy. The execution pipeline runs its effects. Write pipeline code only to add an effect through a plugin or inspect effect ordering and execution.https://praxis.fast/policy/dev/quickstart/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/quickstart/Stand up PPE and run the scenario: a get_employee route that authorizes by role and redacts a field by permission.https://praxis.fast/policy/dev/testing/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/testing/Test APL by loading a policy, driving operations through the runtime, and asserting each outcome. Most route tests need no live backend.https://praxis.fast/policy/dev/threat-model/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/threat-model/This threat model defines the assumed adversary, the Reference Monitor boundary, and the coverage of each deployment placement.https://praxis.fast/policy/dev/upgrade-apl/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/upgrade-apl/Rewrite the keys and forms listed below. Each entry states the old behavior, the replacement, and the load error produced by a missed migration.https://praxis.fast/policy/dev/use-cases/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/policy/dev/use-cases/Explore end-to-end PPE deployments for AI gateways, identity providers, delegated credentials, and policy enforcement.