Definition
The rule that policy is a state of the running system rather than an input consumed at deployment. A policy record has a version, assumptions, an expiry, and a current status that other objects can read and react to.
It matters because policy held as a document cannot take part in control. Only policy held as state lets an assumption going stale change an authority grant without anyone remembering to look.
Scale: Systemic · Phases: Design, Deployment · Measurability: Semi-quantitative · Maturity: Core concept
Adjacent terms
References
- Laws for engineering delegated intelligence · Doctrine