Policy operations
Runtime enforcement
Progress from visibility to intervention without skipping human approval.
Modes
Observe and Simulate never block. Warn surfaces a policy outcome. Hold pauses for confirmation. Block denies the action.
Failure behavior
Fail-open is the default for observation and warning. Fail-closed requires explicit approval, an emergency bypass, and shutdown procedures.
Overrides
Every override records actor, reason, policy version, triggering evidence, and timestamp in the audit history.
Aegis provides governance and security decision support, not legal certification. Confirm applicability and exceptions with accountable human reviewers.