PolicyValidationOutcome

PolicyValidationOutcome

Final policy outputs exposed by successful path-validation APIs.

interface PolicyValidationOutcome {
	readonly authorityConstrainedPolicies: readonly ConstrainedPolicy[];
	readonly userConstrainedPolicies: readonly ConstrainedPolicy[];
}

Properties

• readonly authorityConstrainedPolicies: readonly ConstrainedPolicy[] — Policies valid under the authority's (CA chain) constraints alone.
• readonly userConstrainedPolicies: readonly ConstrainedPolicy[] — Policies from PolicyValidationInput.initialPolicySet the chain establishes, per RFC 9618 §5.5 step (g)(5)-(6). Includes OIDs covered only by an authority-constrained anyPolicy, so this is not necessarily a subset of authorityConstrainedPolicies.