| """Shield: the protective layer around the engine - policy, position awareness, posture audit, enforcement, playbooks. | |
| policy what the operator allows the layer to do (report / enforce), per family and severity, allowlists | |
| position what the layer can see from where it runs -> which roles it takes (edge WAF, host firewall, sensor, chain node) | |
| posture what is exposed that should not be (listening ports vs policy, forgotten services), with fixes | |
| enforce block / rate-limit / challenge with TTLs and an audit log; nftables, iptables, Windows Firewall, or dry-run | |
| playbook recent attack patterns (2024-2026) as behaviour signatures over the engine's own features, with actions | |
| adapters other inputs seen as streams (JSON-RPC for chain nodes) | |
| """ | |
| from dibaguard.shield.policy import Policy # noqa: F401 | |