Files
Stephan Renatus cb54e9c14f runtime: rule labels metadata processing follow-ups (#8613)
 We now parse rego metadata annotations by default.

Rule annotations now support a `labels` field. During policy eval,
labels from all successfully evaluated rules are collected and included
in each decision log entry as a top-level `rule_labels` array. Each
element preserves the label map from one evaluated rule. Exact
duplicates are omitted.

```rego
# METADATA
# labels:
#   severity: low
#   team: platform
allow if input.role == "admin"
```

The resulting decision log entry will contain:

```json
{"rule_labels": [{"severity": "low", "team": "platform"}]}
```

---------

Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com>
2026-05-08 15:00:26 +00:00
..
2025-12-16 11:47:04 +01:00
2026-05-07 14:43:08 +02:00
2024-12-12 15:09:03 +01:00
2025-12-16 11:47:04 +01:00
2026-04-29 14:54:40 +02:00
2026-05-05 19:59:10 +02:00
2024-12-12 15:09:03 +01:00
2024-12-12 15:09:03 +01:00
2024-12-12 15:09:03 +01:00
2026-04-22 13:32:30 +00:00
2024-12-12 15:09:03 +01:00
2024-12-12 15:09:03 +01:00
2025-02-14 14:00:33 +01:00
2025-05-12 13:57:48 +02:00
2024-12-12 15:27:34 +01:00
2025-11-27 10:41:37 +01:00
2026-05-07 14:43:08 +02:00
2026-05-07 14:43:08 +02:00
2025-02-14 14:00:33 +01:00
2026-05-07 14:43:08 +02:00
2026-05-07 14:43:08 +02:00
2024-12-12 15:09:03 +01:00
2026-04-30 16:29:23 +02:00
2025-11-27 10:41:37 +01:00
2026-05-07 14:43:08 +02:00