Policy Config
/
Proposed Changes
Save your edits to the shared draft. Publish it with a note to make the next version live.
Policy Config v13Draft· 12 proposed changes
the shared draft · publishing makes it v14These changes willtighten4 policiesand loosen4 policiesfor 14 people across 5 teams.
| Direction | People | |
|---|---|---|
| Engineering | 11% looser · 89% stricter | 18 P PriyaJ JordanA AlexN Noor+5 more |
| Finance | 100% stricter | 2 A AlexD Dev |
| GRC | 100% looser | 2 M MarkR Riley |
| Team A | 100% looser | 1 UA User A |
| Team B | 100% looser | 1 UB User B |
Tightened 4 policies
·Loosened 4 policies
- Out of visibility
- Mark, Riley, Noor · Off: no findings or notifications from these people
- Findings
- No findings change · 6 open in scope
Itemized changes
12 changes# | Policy | Change | Reason | Author | Saved |
|---|---|---|---|---|---|
| 1 |  Agent traffic must use approved encrypted transportTeam : Engineering | Exception · Observe | “Preview what the transport policy would catch on Engineering before anyone else” | R Riley | 4d ago |
| 2 | Personal account is in use | Severity High → Critical | “Two leaks last week came through personal accounts” | D Dana | 4d ago |
| 3 | Agents run in a sandboxTeam : Finance | Exception · Enforce | “Finance pilots sandbox enforcement before the rest of the org” | S Sam | 4d ago |
| 4 | Tools must be on the allow listTeam : Engineering | Exception · Enforce | “Engineering agents reach production; only listed tools.” | S Sam | 4d ago |
| 5 | Prompts are inspected for injection and leakageTeam : GRC | Exception · Off until Nov 30 | “GRC's red-team prompts are injections by design; off for GRC until the exercise closes” | R Riley | 3d ago |
| 6 | Unsanctioned MCP server in useOrg Wide | Mode Enforce → Observe until Dec 1, then Enforce | “The sanctioned list is being rebuilt; blocks would hit servers that are about to be approved” | D Dana | 2d ago |
| 7 | Sensitive information sanitized before transmissionUser : Noor | Exception · Off until Nov 20 | “Noor runs the DLP vendor's red-team exercise against the evidence pipeline with synthetic SSNs and card numbers; redaction would hide exactly what the exercise tests, so the policy is off for Noor until it closes on the 20th” | S Sam | 39h ago |
| 8 | Approved model providers onlyUser : Jordan | Exception · Observe until Nov 15 → Observe until Dec 15 | “The Mistral eval runs into December; the harness comparison needs two more release cycles.” | Y you | 31h ago |
| 9 | Unsanctioned MCP server in useTeam : Engineering | Exception · Observe revoked | “The sanctioned list settled; Engineering follows the policy like everyone else” | Y you | 14h ago |
| 10 | Unsanctioned MCP server in use | Severity High → Medium (recommended) | “Back to the recommendation now that Finance enforces” | R Riley | 13h ago |
| 11 | Unsanctioned MCP server in use | Sanctioned MCP servers: + Linear MCP | “Linear MCP passed the vendor review on Oct 30” | D Dana | 9h ago |
| 12 | Consequential tool calls require approvalTeam : Contractors | Exception · Enforceinvalid | “Contractor agents hold consequential calls for a human” | D Dana | 5h ago |
Publish is blocked: one change needs fixing
- #12 Consequential tool calls require approval · Exception · Team: Contractors · Enforce: There is no team "Contractors" any more. Remove this line to publish.