# PolicyAsLanguage

PolicyAsLanguage compiles natural-language policy rules into
deterministic OPA Rego, with verified test fixtures.
URL: https://policyaslanguage.com
Free; no signup.
Built by Obsidian Black Ltd on the SmartFact Platform.

## What it does

Takes a policy rule written in plain English ("Reject pods that run as root",
"S3 buckets must have versioning enabled", "Engineers can read shared
configuration files") and emits idiomatic OPA Rego scoped to one of three
use cases: Kubernetes admission, infrastructure-as-code scanning, or
application authorisation.

Server-side verification ensures emitted Rego is syntactically correct
and semantically tested before it is shown.

## Use cases supported in v1.0

- Kubernetes admission control (privileged containers, image registries,
  resource limits, security contexts, labels, tolerations)
- Infrastructure-as-code scanning (AWS S3/RDS/IAM/EC2/Lambda/CloudTrail/
  Elasticsearch, Azure storage/SQL, GCS buckets)
- Application authorisation (subject + resource + action checks, role
  membership, ownership, environment scoping)

## Use cases NOT supported in v1.0

- Stateful authorisation graphs (RBAC role hierarchies, ReBAC)
- Multi-record aggregation rules ("no more than 5 admins per tenant")
- Output formats other than Rego (Cedar, Kyverno YAML, Cerbos - v1.1+)

## Sample queries the tool can answer

- "Compile to Rego: every Pod must declare CPU and memory limits."
- "Compile to Rego: S3 buckets must have versioning enabled."
- "Compile to Rego: only admins can delete production resources."

## Sample queries the tool cannot answer

- "Compile to Cedar / Kyverno YAML / Cerbos." (v1.1+ targets)
- "No more than 5 admins per tenant." (aggregate condition; v1.1+)

## Independent measurement

v1.0 pass rate: 90.5%, independently measured at PolicyBench.
Full methodology and the per-spec result detail are at
https://policybench.dev/models/policyaslanguage.html.

## Links

- Demo: https://policyaslanguage.com
- How it works: https://policyaslanguage.com/how-it-works
- How to use: https://policyaslanguage.com/how-to-use
- Examples: https://policyaslanguage.com/examples
- About: https://policyaslanguage.com/about
- Roadmap: https://policyaslanguage.com/roadmap
- Independent measurement: https://policybench.dev/models/policyaslanguage.html
- llms-full.txt: https://policyaslanguage.com/llms-full.txt