ControllerPolicyState

Type: Object

Per-controller IO/exec allowlists pushed alongside edgeApps on config.update. Default-deny on first boot — a controller with no policy row receives empty lists, which the bridge treats as 'reject everything'.

Fields

Name	Type	Args	Description	Deprecated
allowedExecBinaries	[String!]!		Absolute-path allowlist consulted by bridge.exec.run. Empty list = deny all exec.
allowedIoPaths	[String!]!		Prefix-allowlist consulted by bridge.io.* and the local.file RPC. Empty list = deny all IO.
controllerId	ControllerID!		Controller this policy applies to
createdAt	String!		Creation timestamp (ISO8601)
id	ControllerPolicyID!		Unique identifier
updatedAt	String!		Last update timestamp (ISO8601)