Skip to main content
Page stub. Full content lives in the README — Policy Bundles.

​
TL;DR

Hexgate has two policy engines that return identical decisions:
  • pydantic — evaluates constraints in-process. Zero setup; what every example uses.
  • WASM — compiles policy.yaml → Rego → WebAssembly. Production-ready, signed, byte-for-byte reproducible.
A “bundle” is a directory containing policy.yaml + policy.rego + policy.wasm + a manifest with SHA-256 of each artifact + an optional Ed25519 detached signature over the manifest.