| Both sides previous revision Previous revision Next revision | Previous revision |
| fxdemo:02-part:10-logical-interaction-patterns:10-9-enforce-policy-decision-and-produce-authorised-release:start [2026/07/11 11:07] – ↷ Links adapted because of a move operation nick_dido | fxdemo:02-part:10-logical-interaction-patterns:10-9-enforce-policy-decision-and-produce-authorised-release:start [2026/07/18 12:33] (current) – external edit 127.0.0.1 |
|---|
| ====== 10.9 Enforce Policy Decision and Produce Authorised Release ====== | ====== 10.9 Enforce Policy Decision and Produce Authorized Release ====== |
| [[fxdemo:02-part:start | Go To Top ]] | [[fxdemo:02-part:start | Go To Top ]] |
| |
| The Enforce Policy Decision and Produce Authorised Release pattern allows a [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:l:logical_node|Logical Node]] to apply a policy decision before completing a protected action. | The Enforce Policy Decision and Produce Authorized Release pattern allows a [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_node|Logical Node]] to apply a policy decision before completing a protected action. |
| |
| A policy-enforcing [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:l:logical_node|Logical Node]] receives or obtains a policy decision and any associated obligations. It then allows, denies, filters, redacts, masks, transforms, aggregates, packages, routes, forwards, releases, or blocks the protected information according to that decision and those obligations. | A policy-enforcing [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_node|Logical Node]] receives or obtains a policy decision and any associated obligations. It then allows, denies, filters, redacts, masks, transforms, aggregates, packages, routes, forwards, releases, or blocks the protected information according to that decision and those obligations. |
| |
| The interaction belongs primarily to the [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:l:logical_policy_and_release_plane|Logical Policy and Release Plane]]. It also connects to the [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:l:logical_data_plane|Logical Data Plane]] when the protected action concerns domain information, and to the [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:l:logical_audit_and_provenance_plane|Logical Audit and Provenance Plane]] when the architecture records the decision, enforcement action, release product, obligations, [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:l:logical_information_lineage|lineage]], and [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]. | The interaction belongs primarily to the [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_policy_and_release_plane|Logical Policy and Release Plane]]. It also connects to the [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_data_plane|Logical Data Plane]] when the protected action concerns domain information, and to the [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_audit_and_provenance_plane|Logical Audit and Provenance Plane]] when the architecture records the decision, enforcement action, release product, obligations, [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_information_lineage|lineage]], and [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]. |
| |
| Table 10-8: Enforce Policy Decision and Produce Authorised Release logical interaction pattern | Table 10-8: Enforce Policy Decision and Produce Authorized Release logical interaction pattern |
| |
| ^ Element ^ Logical treatment ^ | ^ Element ^ Logical treatment ^ |
| | Primary Runtime Plane | [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:l:logical_policy_and_release_plane|Logical Policy and Release Plane]] | | | Primary Runtime Plane | [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_policy_and_release_plane|Logical Policy and Release Plane]] | |
| | Related Runtime Planes | [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:l:logical_data_plane|Logical Data Plane]] and [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:l:logical_audit_and_provenance_plane|Logical Audit and Provenance Plane]] | | | Related Runtime Planes | [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_data_plane|Logical Data Plane]] and [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_audit_and_provenance_plane|Logical Audit and Provenance Plane]] | |
| | Producing Logical Node Role | Policy Enforcement Node, Release Control Node, Metadata / Aggregate View Builder, Release Gateway, or Data Producer | | | Producing Logical Node Role | Policy Enforcement Node, Release Control Node, Metadata / Aggregate View Builder, Release Gateway, or Data Producer | |
| | Consuming Logical Node Role | Authorised Recipient, Oversight Node, Audit Node, Provenance Node, or Evidence Node | | | Consuming Logical Node Role | Authorized Recipient, Oversight Node, Audit Node, Provenance Node, or Evidence Node | |
| | Primary information | Policy decision response, obligation record, release product, redacted view, masked view, aggregate view, metadata view, or denial record | | | Primary information | Policy decision response, obligation record, release product, redacted view, masked view, aggregate view, metadata view, or denial record | |
| | Supporting information | Information subject, decision identifier, policy baseline, obligations, recipient, purpose, jurisdiction, sovereignty domain, residency domain, [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:l:logical_information_lineage|lineage]] reference, content hash, signature reference, and timestamp | | | Supporting information | Information subject, decision identifier, policy baseline, obligations, recipient, purpose, jurisdiction, sovereignty domain, residency domain, [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_information_lineage|lineage]] reference, content hash, signature reference, and timestamp | |
| | Traceability expectation | Enforcement traces to the policy decision, protected action, enforcing [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:l:logical_node|Logical Node]], information subject, recipient, purpose, policy context, obligations, and release product. | | | Traceability expectation | Enforcement traces to the policy decision, protected action, enforcing [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_node|Logical Node]], information subject, recipient, purpose, policy context, obligations, and release product. | |
| | Evidence expectation | Enforcement and release records support review of authorised release, denial, redaction, aggregation, masking, transformation, routing, obligation handling, and release [[fxdemo:dido_99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]. | | | Evidence expectation | Enforcement and release records support review of authorized release, denial, redaction, aggregation, masking, transformation, routing, obligation handling, and release [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]. | |
| |
| ---- | ---- |