{
  "slug": "buildx-policy-eval-reads-policy-from-stdin-with-f-fd4d0e441929",
  "title": "buildx policy eval reads policy from stdin with -f -",
  "tools": [
    "buildx"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-03-31T15:32:35.000Z",
  "announced_at": "2026-03-31T15:32:35.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When evaluating a policy supplied on standard input, run `docker buildx policy eval -f - <source>`; `-f -` reads the policy from stdin.",
    "examples": [
      "docker buildx policy eval -f - <source>"
    ],
    "gotchas": [
      "Version: v0.33.0",
      "-f, --file: Policy filename to evaluate; `-` reads policy from stdin. Defaults to `Dockerfile`.",
      "Prerequisite: Buildx v0.33.0 or later for reading policy from stdin with `-f -`."
    ]
  },
  "why_it_matters": "Evaluate a policy supplied through standard input.",
  "sources": [
    "https://github.com/docker/buildx/releases/tag/v0.33.0",
    "https://docs.docker.com/reference/cli/docker/buildx/policy/eval/"
  ],
  "rank": 0.93026,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave1-20261014",
    "verdict_id": "wave1-20261014:wave1-20261014-5721fac1512f99c0-5:gate",
    "evidence_hash": "321eab6c4472d4749fc6daff98294785d8851de2d8ba0e141b287b244a956428"
  },
  "review": {
    "draft_hash": "4d90149caa7a8bb12dd555d27a1190c842c84684fed6a5257cb0dc635392df28",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave1-20261014:gate",
    "reason": "2 of 3 judge runs approved with p_yes >= 0.9 (mean 0.93 >= 0.9; 2 needed) and Jev gave 0.63 (>= 0.6 needed)."
  }
}