{
  "slug": "pulumi-policy-packs-can-use-executable-binaries-437c7c7bbdf1",
  "title": "Pulumi policy packs can use executable binaries",
  "tools": [
    "pulumi"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-07-28T13:37:19.000Z",
  "announced_at": "2026-07-28T13:37:19.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When running a Pulumi preview with an executable policy pack, pass the executable’s path to `--policy-pack`. A neighboring `PulumiPolicy.yaml` may provide the pack’s `version` and `description`.",
    "examples": [
      "pulumi preview --policy-pack <path-to-executable>"
    ],
    "gotchas": [
      "Version: 3.255.0",
      "--policy-pack <path> (required): Path to the local policy pack; for this task, use the executable binary’s path.",
      "PulumiPolicy.yaml: version: Sets the policy pack version.",
      "PulumiPolicy.yaml: description: Sets the policy pack description.",
      "Prerequisite: The policy pack must be present on disk where Pulumi is run.",
      "Prerequisite: For an executable pack, the path passed must be a file; Pulumi runs that executable directly.",
      "The executable binary must be the policy pack path."
    ]
  },
  "why_it_matters": "Run a policy pack implemented as an executable binary.",
  "before": "Policy-pack paths that were not files went through language-runtime lookup; the change runs a file path directly as an executable.",
  "sources": [
    "https://github.com/pulumi/pulumi/releases/tag/v3.255.0",
    "https://github.com/pulumi/pulumi/pull/24052",
    "https://www.pulumi.com/docs/discovery-governance/policy/cli/"
  ],
  "rank": 0.96017,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave1b-20261016",
    "verdict_id": "wave1b-20261016:wave1b-20261016-b70815ae25b71222-7:gate",
    "evidence_hash": "e2f35f1efc0287e1421a29997355e7fbf88f4115b5f387db20b1956ed599fa51"
  },
  "review": {
    "draft_hash": "f1fb43928d65aa44a88f128207b9a4a203af2ff3f9749bf3675ddb554622c42d",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave1b-20261016:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.96 >= 0.9; 2 needed) and Jev gave 0.62 (>= 0.6 needed)."
  }
}