client-1pass decided 25 Oct 2026 14:17 UTCsample mode

Policy

The rules that can govern client-1's settings; the most specific match governs.

About this page

As the policy_rule rows hold them (src/policy/resolve.ts). A locked rule rolls a drift back at the next cycle; a change window holds it instead until the window ends.

RuleSurfaceObject · settingLockOn driftHoldAlertNote
rule-b8d9962485c3ced4version 2*** · **openholdno copy: ticket72 hnever · P3everything else is held with an expiry
rule-8e75e1d767980665version 2cloudflare.dns* · proxiedlockedrollbackno copy: investigate_ticket4 halways · P1
rule-a3f26f34efab2ebbversion 2cloudflare.dns* · contentlockedrollbackno copy: investigate_ticket4 halways · P1where a name points
rule-a8722e4f568e681eversion 2cloudflare.dns* · ttlopenadoptno copy: adopt0 hnever · P4
rule-66810b66396a3b15version 2linux.nginx** · server[*].real_ipopenholdno copy: ticket72 hnever · P3
rule-44429a425c681bfdversion 2linux.nginx**/*.bak* · **openadoptno copy: adopt0 hnever · P4
rule-90f1bcb36548ea39version 2linux.nginx**/*.pre-symlink* · **openadoptno copy: adopt0 hnever · P4
rule-c6c3c71938210651version 2linux.nginx/etc/nginx/conf.d/*.bak* · **openadoptno copy: adopt0 hnever · P4
rule-e186e9d5790a7e6bversion 2linux.nginx/etc/nginx/conf.d/*.conf · filelockedrollbackno copy: investigate_ticket24 hon_fix · P1a served vhost file is restored to its approved copy when it drifts
rule-42827f90778592ffversion 2linux.nginx/etc/nginx/conf.d/*.conf.* · **openadoptno copy: adopt0 hnever · P4dated copies beside a live file
rule-d0e0d34c8ae191b4version 2linux.nginx/etc/nginx/nginx.conf · filelockedrollbackno copy: investigate_ticket24 halways · P1
rule-6c41a25a00c404c8version 2linux.nginx/etc/nginx/sites-available/* · filelockedrollbackno copy: investigate_ticket24 hon_fix · P1
rule-be0bf7afde964803version 2linux.nginx/etc/nginx/sites-available/*.bak* · **openadoptno copy: adopt0 hnever · P4
rule-01eb3d1f7585323cversion 2linux.nginx/etc/nginx/sites-available/*.orig · **openadoptno copy: adopt0 hnever · P4
rule-504a8801607b9f1cversion 2linux.nginx/etc/nginx/sites-available/*.pre-symlink* · **openadoptno copy: adopt0 hnever · P4
rule-6774a8522593a0fcversion 2m365.dns** · **openescalateno copy: ticket0 halways · P2mail DNS is never changed automatically: a record Microsoft 365 requires that the zone lacks or serves with another value goes to a technician by ticket
rule-8bcb3a03ffcee62eversion 2zetaris.control** · **lockedescalateno copy: ticket0 halways · P1the data layer the agent reads through: a changed DQ rule, entity, grant, datasource or server version goes to a technician by ticket, and the agent changes nothing
rule-065675cb4d5c500eversion 1*** · **openholdno copy: ticket72 hnever · P3everything else is held with an expiry
rule-74bb55e3a2609e26version 1cloudflare.dns* · contentlockedrollbackno copy: investigate_ticket4 halways · P1where a name points
rule-c8fcc69e69b2e155version 1cloudflare.dns* · ttlopenadoptno copy: adopt0 hnever · P4
rule-d9e0b928bee577c8version 1cloudflare.dns* · proxiedlockedrollbackno copy: investigate_ticket4 halways · P1
rule-e611622049c91a41version 1linux.nginx** · server[*].real_ipopenholdno copy: ticket72 hnever · P3
rule-c27b8c0c6ceb0d4bversion 1linux.nginx**/*.bak* · **openadoptno copy: adopt0 hnever · P4
rule-83675c80df65349cversion 1linux.nginx**/*.pre-symlink* · **openadoptno copy: adopt0 hnever · P4
rule-56e7dcd55807303bversion 1linux.nginx/etc/nginx/conf.d/*.conf · filelockedrollbackno copy: investigate_ticket24 hon_fix · P1a served vhost file is restored to its approved copy when it drifts
rule-649c207ad0831949version 1linux.nginx/etc/nginx/conf.d/*.conf.* · **openadoptno copy: adopt0 hnever · P4dated copies beside a live file
rule-18c08ac3687abb68version 1linux.nginx/etc/nginx/nginx.conf · filelockedrollbackno copy: investigate_ticket24 halways · P1
rule-a792adc047d77b1aversion 1linux.nginx/etc/nginx/sites-available/* · filelockedrollbackno copy: investigate_ticket24 hon_fix · P1