POL-014 · All model calls

Restricted payloads stay in-region

Compiled into the runtime gateway and evaluated inline on every prompt, tool call and completion in scope. Owned by Platform.

Simulate this policycriticalenforcingEdit in rule builder

Triggers / 30d

412

blocks, masks and escalations

Integrations bound

0

enforced at each connection

Severity

critical

owner Platform

Added latency

7 ms

p99 within the 60 ms budget

Rule definition

Compiled expression

When

  • data class = Restricted
  • endpoint region ≠ India

Then

  • reroute to in-VPC model
  • log deviation

Policy as code

apiVersion: truint.ai/v1
kind: RuntimePolicy
metadata:
  id: POL-014
  name: "Restricted payloads stay in-region"
  owner: "Platform"
  scope: "All model calls"
spec:
  severity: critical
  mode: enforce
  when:
    - "data class = Restricted"
    - "endpoint region ≠ India"
  then:
    - "reroute to in-VPC model"
    - "log deviation"

Governance metadata

Policy ID
POL-014
Owner
Platform
Scope
All model calls
State
Enforcing inline
Catalog version
2026.07.3
Last change
2026-07-22 · approved by AI Council

Bound integrations

Where this rule executes

Applies estate-wide rather than to a specific connection.

Recent evaluations

Decisions where this rule fired

No evaluations from this rule in the current buffer.