Policy reference

Hostwright evaluates policy before runtime effects. Decisions identify a category, stable reason code, severity, operator explanation, and remediation. The current policy surface covers Manifest v3 validation, resource admission, provider capability, ownership, image and secret rules, exposure, cleanup, and recovery.

Core rules

• Unsupported manifest fields and provider behaviors fail before effects.
• Capacity requests and limits are validated and reserved through local scheduler authority.
• Broad host exposure and unsafe mount or secret handling are blocked.
• Cleanup requires a current plan and exact proof of Hostwright ownership.
• Team profiles can add stricter requirements. They cannot bypass built-in safety gates or grant broader mutation authority.

Policy decisions explain and constrain behavior; they do not themselves run a runtime command, write state, or contact a registry. Commands enforce their own authenticated effect and recovery boundaries.

For exact rules and reason codes, see the core policy reference and Limitations.