Deployment packages

Deployment packages play a critical role in the policy development lifecycle by providing a controlled, consistent way to promote finalized policies from development to production.

After policies have been developed, tested, and approved in a branch, they’re bundled into a deployment package that captures a specific commit or snapshot of the policy state. This ensures that what gets deployed has been explicitly reviewed and versioned, reducing the risk of unintended changes.

Deployment packages enable predictable, auditable rollouts and support separation of duties by allowing policy authors to create and test policies while delegating deployment to administrators. Deployment packages also enhance governance, traceability, and operational confidence by standardizing how policies are promoted across environments.

While snapshots provide a convenient way to export and load policy and Trust Framework data into Policy Editor instances, deployment packages are intended for use in embedded policy decision point (PDP) mode. Learn more in Configuring embedded PDP mode.

Learn more about deployment package operations: