Cerbos Policy Generator

Prerequisites

Validation runs in Docker, so confirm it is available before writing any files:

docker --version

If it is missing, stop and point the user at Docker Desktop (macOS/Windows) or docs.docker.com/engine/install (Linux). Generation starts once Docker answers.

Workflow Phases

Complete each phase before starting the next.

Phase 1 — Spec Intake

Before writing any files, converge on a compact spec by asking clarifying questions in plain business language ("Who can delete a project?"), never schema jargon. Offer concrete options per question where possible — avoid open-ended prompts. Ask as many rounds and as many questions as the requirements genuinely need.