> For the complete documentation index, see [llms.txt](https://docs.snyk.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.snyk.io/agent-security/evo-by-snyk/platform-surfaces/policies-and-issues.md).

# Policies & issues

Policies govern how AI is used across your environment. When an asset violates a policy, Evo raises an issue that you triage and resolve in your standard security workflow.

## Policies

A policy has a name, a severity (Critical, High, Medium, or Low), one or more conditions matched against asset attributes, and optional remediation steps. A policy supports up to 12 conditions, one per attribute.

Create and edit policies from the Policies & issues page or with Evo chat. You can delete custom policies. Default policies are read-only.

### Default policies

Evo provides default policies that raise high or critical severity risks as issues with no setup. AI-SPM and Agent Supply Chain Security each include default policies.

### User-defined policies

You can also create custom policies. With custom policies, you target assets by their attributes — for example, disallow a specific model in your code, or disallow a specific MCP server in your code, on end users' machines, or both.

#### Create a policy

You can create a policy from the **Policies** page or using Evo chat.

<details>

<summary>Create a policy from the <strong>Policies</strong> page</summary>

To create a policy from the **Policies** page:

1. Click **Create policy**.
2. Complete the form fields.
   1. Use the dropdown menus to select an attribute, a condition, and a value.
   2. Click **+Add condition** to add another condition to the same policy. You can create up to 12 conditions, one per attribute.
3. Click **Create**.

</details>

<details>

<summary>Create a policy using Evo chat</summary>

To create policies using Evo chat, you can ask it to create a policy with specific criteria. For example, you can ask it to "create a policy that raises a critical issue when you detect *\[model name]*".

The **Policy agent** then navigates to the policy creation form. Ensure the policy details are correct and click **Create** to create the policy.

Based on the policy, Evo evaluates scan results and creates issues when matches occur.

A newly created policy produces issues immediately after creation.

</details>

#### Edit a policy

From the **Policies** page, select the policy you want to edit and click **Edit policy**. The following fields are available:

<table><thead><tr><th width="374">Field</th><th>Description</th></tr></thead><tbody><tr><td><strong>Policy name</strong></td><td>The name of the policy.</td></tr><tr><td><strong>Severity</strong></td><td>The severity level assigned to issues created by this policy: <strong>Critical</strong>, <strong>High</strong>, <strong>Medium</strong>, or <strong>Low</strong>.</td></tr><tr><td><strong>Conditions (match all)</strong><br></td><td><p>Add a condition for assets under the policy.</p><p>Use the dropdown menus to select an attribute, a condition, and a value.</p><p>Click <strong>+Add condition</strong> to add another condition to the same policy. You can create up to 12 conditions, one per attribute.</p></td></tr><tr><td><strong>Remediation steps</strong> <strong>(optional)</strong></td><td>Add remediation advice.</td></tr></tbody></table>

#### Delete a policy

{% hint style="warning" %}
You cannot delete default policies.
{% endhint %}

You can delete user-defined policies. To quickly identify critical enforcement, you can group policies by severity.

To delete a policy:

1. Select the policy you want to delete.
2. Click the ellipsis next to **Edit policy**.
3. Click **Delete**.

## Issues

An issue is a policy violation. View issues on the Policies & issues page under Issues, or on an asset in Inventory to see them in context.

Each issue shows its severity, the asset that triggered it, remediation advice, and the number of occurrences. The remaining details vary by issue type.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.snyk.io/agent-security/evo-by-snyk/platform-surfaces/policies-and-issues.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.