Stephan Renatus cb54e9c14f runtime: rule labels metadata processing follow-ups (#8613) ...

❗ We now parse rego metadata annotations by default.

Rule annotations now support a `labels` field. During policy eval,
labels from all successfully evaluated rules are collected and included
in each decision log entry as a top-level `rule_labels` array. Each
element preserves the label map from one evaluated rule. Exact
duplicates are omitted.

```rego
# METADATA
# labels:
#   severity: low
#   team: platform
allow if input.role == "admin"
```

The resulting decision log entry will contain:

```json
{"rule_labels": [{"severity": "low", "team": "platform"}]}
```

---------

Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com>

2026-05-08 15:00:26 +00:00

..

utils_test.go

runtime: rule labels metadata processing follow-ups (#8613)

2026-05-08 15:00:26 +00:00

utils.go

runtime: rule labels metadata processing follow-ups (#8613)

2026-05-08 15:00:26 +00:00