# Policy

**Type:** GraphQL objects

**Description:**
Represents a policy that evaluates agent events and creates issues

## Fields
- id (ID): Unique identifier for the policy
- name (String): Policy name
- description (String): Detailed description of what the policy does
- mode (PolicyMode, Not Null): Current enforcement mode of the policy

- status (PolicyStatus, Not Null): Current status of the policy

- trigger (PolicyTrigger, Not Null): Event that triggers policy evaluation
  - type (PolicyTriggerType): Type of trigger event
- conditions (PolicyConditionGroup, Not Null): Conditions that must be met for the policy to match
  - agentFilter (AgentFilterOutput): Filter on agent properties (environment, platform, owner, etc.)
  - toolFilter (ToolFilterOutput): Filter on tool properties (for TOOL_INVOCATION trigger)
  - findingFilter (FindingFilterOutput): Filter on findings present on the agent (type, detectedAt)
  - detectionFilter (DetectionFilterOutput): Filter on runtime detections on the agent
- actions (PolicyAction, Not Null): Actions to execute when policy conditions match
  - type (PolicyActionType): Type of action to execute
  - params (PolicyActionParams): Parameters for the action
- autoResolve (Boolean): Automatically resolve issues when conditions are no longer met
- isDefault (Boolean): Indicates if this policy is a system default or custom/modified by the tenant
- issuesCount (Int): Number of issues created by this policy
- lastExecutedAt (DateTime): When the policy was last executed
- createdAt (DateTime): When the policy was created
- updatedAt (DateTime): When the policy was last updated
- createdBy (Owner): User who created the policy
  - externalId (ID)
  - id (ID)
  - name (String)
  - jobTitle (String)
  - email (String)
- updatedBy (Owner): User who last updated the policy
  - externalId (ID)
  - id (ID)
  - name (String)
  - jobTitle (String)
  - email (String)
- version (Int): Version number, incremented on each update
- deletedAt (DateTime): When the policy was soft-deleted (null if active)
- environmentTypes (EnvironmentType, Not Null): Effective environment types where this policy applies.
Returns specific environments if conditions include environment filters,
or all environments (Prod, Sandbox, Dev) if no environment filter is specified.