Question 1

What is a policy pack?

Accepted Answer

A policy pack defines the rules for a capability (e.g., finance.payment.refund.v1). It specifies limits, assurance requirements, and context validation. Policy packs are OAP-compliant and versioned.

Question 2

How do I add a policy pack to my endpoint?

Accepted Answer

Install the Express or FastAPI middleware, configure it with your policy pack ID, and wrap your sensitive routes. The middleware calls the verify API before each request.

Question 3

Can I customize policy pack limits?

Accepted Answer

Yes. Organizations can customize limits (e.g., max refund amount, export row count) per policy pack. Limits are enforced at verification time.

APort

APort Policy Packs