control.policy.evaluate_matrix

Evaluate a list of items against reusable policy rules and summarize compliance

Overview

Property	Value
Workflow type	Atomic
Library	App-control
Version	1.0

Input Schema

Field	Type	Required	Default	Description
items	json	Yes	—	List of row objects to evaluate, such as services, packages, images, or controls.
rules	json	Yes	—	List of rule objects with id, field, op, and optional value. Operators match control.predicate.compare.
mode	string	No	—	Per-item rule mode: all (default), any, or none.
identity_fields	json	No	—	Fields used to build stable row identities, for example service or package.
name_fields	json	No	—	Fields used to choose display labels for summary_text.
strict_rules	boolean	No	—	Fail invalid rule definitions instead of reporting affected rows as unknown.

Output Schema

Field	Type	Required	Default	Description
items	json	No	—	Input item list echoed from input.
rules	json	No	—	Input rule list echoed from input.
mode	string	No	—	Per-item rule mode used for evaluation.
identity_fields	json	No	—	Identity fields used for matching and labels.
name_fields	json	No	—	Name fields used for display labels.
strict_rules	boolean	No	—	Whether invalid rules were fatal.
checked_count	integer	No	—	Number of items evaluated.
rule_count	integer	No	—	Number of rules evaluated per item.
compliant_count	integer	No	—	Number of items with compliant status.
noncompliant_count	integer	No	—	Number of items with noncompliant status.
unknown_count	integer	No	—	Number of items with unknown status.
checked_items	list	No	—	Per-item policy evaluation records.
compliant_items	list	No	—	Items whose rules evaluated compliant.
noncompliant_items	list	No	—	Items whose rules evaluated noncompliant.
unknown_items	list	No	—	Items whose rule status could not be fully determined.
summary_text	string	No	—	Bounded deterministic prose summary.
status	string	No	—	Aggregate status: compliant, noncompliant, or unknown.
result	json	No	—	Typed envelope using schema control.policy.evaluate_matrix.v1.
failure_reason	string	No	—	—
failure_type	string	No	—	—
failed_action	string	No	—	—
failed_at_state	string	No	—	—
failed_step	string	No	—	—
failed_layer	string	No	—	—
error	string	No	—	—
error_type	string	No	—	—

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	execute	—
completed	No	Yes	Yes	—	—
failed	No	Yes	No	—	—

State Diagram

Transitions

From	Action	To	Description
pending	execute	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "control.policy.evaluate_matrix",
  "initial_data": {
    "items": "value",
    "rules": "value"
  }
}