Roll out observe, then enforce

schema: ctrlrun.policy/v3
mode: observe

actions:
  crm.update_record:
    effect: "crm:{record_id}:{field}"
    decision: allow
  email.send:
    effect: "email:{message_id}"
    rules:
      - when: { to_domain_eq: "example.com" }
        decision: allow
      - decision: approve
  stripe.refund:
    effect: "refund:{payment_id}"
    rules:
      - when: { amount_gte: 0, amount_lte: 50000 }
        decision: allow
      - when: { amount_gte: 0, amount_lte: 500000 }
        decision: approve
      - decision: deny

import ctrlrun

sent: list[str] = []


@ctrlrun.protect("crm.update_record", effect="crm:{record_id}:{field}")
def update(record_id: str, field: str, value: str) -> str:
    return "updated"


@ctrlrun.protect("email.send", effect="email:{message_id}")
def send(message_id: str, to_domain: str) -> str:
    sent.append(message_id)
    return "sent"


@ctrlrun.protect("stripe.refund", effect="refund:{payment_id}")
def refund(payment_id: str, amount: int) -> str:
    return "refunded"


with ctrlrun.context(agent="support-agent"):
    update(record_id="c_1", field="phone", value="+353 1 555 0100")
    send(message_id="m_1", to_domain="example.com")
    send(message_id="m_2", to_domain="gmail.com")          # would have needed a human
    refund(payment_id="txn_1", amount=10000)
    refund(payment_id="txn_2", amount=250000)               # would have needed a human
    refund(payment_id="txn_3", amount=900000)               # would have been denied
    refund(payment_id="txn_1", amount=10000)                # would have been a duplicate

print("emails actually sent:", len(sent))

ctrlrun stats