1import { definePolicy } from '../../policy';
2import {
3	CONTROL_PLANE_DOMAIN,
4	CONTROL_PLANE_OWNERS,
5	CONTROL_PLANE_STABILITY,
6	CONTROL_PLANE_TAGS,
7} from '../constants';
8
9export const ControlPlaneMessagingPolicy = definePolicy({
10	meta: {
11		key: 'channel.messaging-policy',
12		version: '2.0.0',
13		title: 'Deterministic Messaging Safety Policy',
14		description:
15			'Applies contract-backed blocked, assist, and autonomous routing for inbound messaging events.',
16		domain: CONTROL_PLANE_DOMAIN,
17		scope: 'operation',
18		owners: CONTROL_PLANE_OWNERS,
19		tags: [...CONTROL_PLANE_TAGS, 'policy', 'messaging'],
20		stability: CONTROL_PLANE_STABILITY,
21	},
22	rules: [
23		{
24			effect: 'deny',
25			actions: ['channel.reply'],
26			resource: { type: 'control-plane.message' },
27			conditions: [{ expression: 'context.blockedSignalDetected === true' }],
28			reason: 'blocked_signal_detected',
29		},
30		{
31			effect: 'allow',
32			actions: ['channel.reply'],
33			resource: { type: 'control-plane.message' },
34			conditions: [{ expression: 'context.highRiskDetected === true' }],
35			escalate: 'human_review',
36			reason: 'high_risk_topic_detected',
37		},
38		{
39			effect: 'allow',
40			actions: ['channel.reply'],
41			resource: { type: 'control-plane.message' },
42			conditions: [
43				{
44					expression:
45						'context.mediumRiskDetected === true && context.confidence >= context.assistMinConfidence',
46				},
47			],
48			escalate: 'human_review',
49			reason: 'needs_human_review',
50		},
51		{
52			effect: 'allow',
53			actions: ['channel.reply'],
54			resource: { type: 'control-plane.message' },
55			conditions: [
56				{
57					expression:
58						"context.riskTier === 'low' && context.confidence >= context.autoResolveMinConfidence",
59				},
60			],
61			reason: 'low_risk_high_confidence',
62		},
63		{
64			effect: 'allow',
65			actions: ['channel.reply'],
66			resource: { type: 'control-plane.message' },
67			conditions: [
68				{
69					expression:
70						'context.confidence >= context.assistMinConfidence && context.blockedSignalDetected !== true',
71				},
72			],
73			escalate: 'human_review',
74			reason: 'needs_human_review',
75		},
76		{
77			effect: 'deny',
78			actions: ['channel.reply'],
79			resource: { type: 'control-plane.message' },
80			conditions: [
81				{ expression: 'context.confidence < context.assistMinConfidence' },
82			],
83			reason: 'low_confidence',
84		},
85	],
86});