Policy Modules — Tenant defaults
admin@pluris.local
A
Policy
Modules — Tenant defaults
When more than one module satisfies the same Catalog policy, your tenant default decides which one is used. Bindings inherit this default unless they override it. Resolution order: binding override → tenant default → Pluris default.
How resolution works. When a Configuration Group binding doesn't pin a specific module, Pluris uses the tenant default below. If no tenant default exists for a policy, Pluris uses its bundled-by-default module. You can override any tenant default on an individual binding without changing the default itself.
| Policy URN | Default module | Version pin | Set by | |
|---|---|---|---|---|
sec.remote-access.ssh.password-auth | Disable SSH password authentication pluris.sshd.password-auth-disable | latest | admin@acme.local 2026-04-25T09:14:00Z |
Single Source of Truth UI (INV-U)
Every entry point that shows this concept mounts the same canonical editor with at most a context filter applied. See docs/UX_INVARIANTS.md §VII Concept Registry.