A policy is a (set of) rules, working instructions and/or other guidance for the execution of one or more kinds of actions. that agents (a) have access to, (b) can interpret as intended by their principal (i.e. policy owner) and (c) must use when executing such actions.
An agent must have access to the policy that its principal has established for the kind of action(s) that the agent is executing for its principal. This requires that the policy be readable by the agent, and that the agent is capable of interpreting it as intended by its principal.
It should be part of the principal's governance processes
- to establish, maintain and evaluate policies for every kind of action that its agents may execute,
- to derive artifacts from such policies that are useable by the various agents (digital, human, or otherwise) that have a right or duty to execute actions for the principal to which such policies apply. So, machine-readable policies should be derived for digital agents, and human-readable policies (in different languages if that is appropriate) for non-digital agents.
- to publish such artifacts such that at least every of its agents that may need to access them, can find and access them as needed.
- to inform its agents whenever updates have been made that they need to be aware of (specifically if agents are allowed to keep local copies of such artifacts).
The Parties, Actors and Actions pattern provides an overview of how this concept fits in with related concepts.
A policy is
- a (set of) rules, working-instructions, preferences and other guidance for the execution of one or more kinds of actions;
- governed by a single party (the Governor of the policy) that decides what goes in the policy and what does not;
- may have multiple representations of the rules, working-instructions, preferences and other guidance, which are derived from the policy itself, in such a way that that any actor that has a right or duty to execute an action on behalf of the policy's governor can do so according to its intentions;
- is accessable to, and must be complied with by an agent of that policy's governor when it executes an action of the kind to which the policy applies.