Policy Management

A policy is an ordered list of rules mapping a classification to an enforcement action. Qwall evaluates each inspection against the active profile and records the rule that matched alongside the decision.

Policy changes take effect immediately for new inspections. Decisions already recorded keep the action they received under the profile in force at the time.

Active Rule Set

Strict

protected_preferred → allow evaluated in order

protected → allow evaluated in order

classical_fallback → block evaluated in order

classical → block evaluated in order

unknown → warn evaluated in order

Preset Profiles

Strict

Active

Fail closed. Only a negotiated ML-KEM hybrid group is permitted; anything classical is refused at the gateway.

protected_preferred → allow

protected → allow

classical_fallback → block

classical → block

unknown → warn

Permissive

Allow the quantum safe tiers and raise a warning on everything else. Suitable for staged migrations with legacy dependencies.

protected_preferred → allow

protected → allow

classical_fallback → warn

classical → warn

unknown → warn

Audit Only

Observe and record without enforcing. Every classification is logged as a warning and nothing is blocked.

protected_preferred → warn

protected → warn

classical_fallback → warn

classical → warn

unknown → warn