Platform · Policy
Authorization starts with rules your risk team can read. GREENLIGHT ships a native rule library for consequential agent actions and lets you add your own — every rule versioned, testable and promoted deliberately from test to production.
Part of GREENLIGHT
Why it matters
Most agents run on permissions written for people or service accounts. Those permissions say what a system can reach, not which actions are acceptable, at what size, and when a person must decide. Policy is where you write that down, once, for every agent.
Questions it answers
Where it sits
Every consequential action moves through the same loop. Evidence from each decision informs the next policy.
How it works
01
Rules for payments, account changes and data movement are active from the first day.
02
Write them in plain language and set the thresholds that match your appetite for risk.
03
See which past actions a change would have affected before it goes live.
04
Move rules from UAT to production through an approved, versioned change.
What’s included
Policy · 01
A library of 550+ native rules for consequential actions — payments, refunds, account changes, data movement — active from day one.
Policy · 02
Write organisation rules in plain language, see what they would change before they go live, and promote them from UAT to production with approval.
Policy · 03
Native protections can be tightened, never weakened. Where a threshold is designed to be tuned, you tune it — the floor itself stays in place.
In practice
Operations want agents to settle refunds up to S$500 on their own, with anything above going to a team lead. They set the threshold in Policy Studio, preview how many refunds last month would have been held, and promote the rule once risk approves it.
Illustrative scenario.
Use case
Payments & refunds
Who uses it
The same rules apply whichever framework or vendor built the agent.
Every rule is versioned, previewed and approved before it applies.
Protected rules can be tightened but never quietly weakened.
See it working
We connect one agent workflow in shadow mode and walk you through every decision GREENLIGHT would make, so you can judge it on your own traffic.
