# Constal Policies documentation

> Policies concepts, workflows, operations, and reference for humans and agents.

- [Policies](https://constal.ai/docs/policies.md): Control who can perform an action on an exact Constal Resource and constrain the operation that is allowed.
- [Author Policies with the SDK](https://constal.ai/docs/policies/sdk.md): Define deterministic executable Policy decisions and use canonical identity, action, Resource, and constraint contracts.
- [Operate Policies with the CLI](https://constal.ai/docs/policies/cli.md): Deploy, inspect, and evaluate immutable Policies before attaching them to operational boundaries.
- [Author a Policy](https://constal.ai/docs/policies/author.md): Build deterministic executable authorization logic and test allow, deny, and constraint behavior before attachment.
- [Operate Policies](https://constal.ai/docs/policies/operate.md): Evaluate, attach, version, and audit Policies without silently changing the authority of accepted Runs.