Interface EntityAccessEvaluationResult

Detailed result of evaluating an entity access request against the user's ceiling + agent policy.

interface EntityAccessEvaluationResult {
    combinedRlsWhereClause: string;
    deniedFieldPatterns: string[];
    nextWindowStartISO: string;
    readOnlyFieldPatterns: string[];
    reason: string;
    requireApprovalFieldPatterns: string[];
    rlsFilterIds: string[];
    verdict: AgentPolicyVerdict;
}

Properties

combinedRlsWhereClause: string

Additional SQL WHERE clause (validated via SQLExpressionValidator) to AND with user RLS.

deniedFieldPatterns: string[]

Field patterns that must be stripped from read results and blocked from writes.

nextWindowStartISO: string

Next allowed window start timestamp (ISO-8601) when verdict === 'DeferUntilNextWindow'.

readOnlyFieldPatterns: string[]

Field patterns that are readable but blocked from Create/Update mutations.

reason: string

requireApprovalFieldPatterns: string[]

Field patterns whose mutation requires explicit user approval via AIAgentRequest.

rlsFilterIds: string[]

Reusable MJ: Row Level Security Filters IDs referenced by matching rules.