---
summary: "Adds policy-backed doctor checks for workspace conformance."
read_when:
  - You are installing, configuring, or auditing the policy plugin
title: "Policy plugin"
---

# Policy plugin

Adds policy-backed doctor checks for workspace conformance.

## Distribution

- Package: `@daocore/policy`
- Install route: included in DaoCore

## Surface

plugin; CLI command: [`daocore policy`](/cli/policy)

## Behavior

The Policy plugin contributes doctor health checks for policy-managed DaoCore
settings and governed workspace declarations. Policy currently covers channel
conformance, governed tool metadata, MCP server posture, model-provider posture,
private-network access posture, Gateway exposure posture, and DaoCore config
secret provider/auth profile posture.

Policy stores authored requirements in `policy.jsonc`, observes existing
DaoCore settings and workspace declarations as evidence, and reports drift
through `daocore policy check` and `daocore doctor --lint`. A clean policy
check emits policy, evidence, findings, and attestation hashes that operators
can record for audit.

## Related docs

- [Policy CLI](/cli/policy)
- [Doctor lint mode](/cli/doctor#lint-mode)
