Skip to content

docs: add working with controls tutorial#154

Draft
pbeckham wants to merge 21 commits intomainfrom
claude/friendly-wilson
Draft

docs: add working with controls tutorial#154
pbeckham wants to merge 21 commits intomainfrom
claude/friendly-wilson

Conversation

@pbeckham
Copy link
Copy Markdown
Contributor

@pbeckham pbeckham commented Apr 16, 2026

❗️
This is a a proposed feature. Presented as a tutorial in order to get feedback on the design and feature set before starting development.
It is not a feature in Kosli - yet...

Summary

  • Adds tutorials/working_with_controls.mdx — a tutorial covering how to define controls in Kosli, record decisions against them, reference them in environment policies, and view compliance across deployments.
  • Updates config/navigation.json to include the new page under a new "Controls" group in the Tutorials section.

Closes kosli-dev/server#5355

@pbeckham pbeckham requested a review from a team as a code owner April 16, 2026 09:58
@mintlify
Copy link
Copy Markdown
Contributor

mintlify Bot commented Apr 16, 2026

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated (UTC)
kosli 🟢 Ready View Preview Apr 16, 2026, 9:58 AM

Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread images/tutorials/controls-list.png
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread images/tutorials/controls-compliance-coverage.png
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
@mbevc1
Copy link
Copy Markdown
Contributor

mbevc1 commented Apr 16, 2026

Was this released yet? I cannot see this in Kosli 🤔

@pbeckham
Copy link
Copy Markdown
Contributor Author

Was this released yet? I cannot see this in Kosli 🤔

No this is a proposed feature. We are making this documentation ahead of development to facilitate discussions and get early feedback before we build it.

@mbevc1
Copy link
Copy Markdown
Contributor

mbevc1 commented Apr 16, 2026

Okay, I assume we're not releasing this to docs yet then? I think it might confuse our customers.

Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread images/tutorials/controls-compliance-coverage.png
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
@tooky
Copy link
Copy Markdown

tooky commented Apr 17, 2026

Perhaps we can make this a "draft" PR?, just to prevent it being merged :)

@tooky tooky marked this pull request as draft April 17, 2026 12:21

### Deployments

The Deployments tab shows where artifacts with decisions against this control have been deployed, with compliant/non-compliant status per deployment, filterable by repository, flow, and environment.
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How do we get the correct list of environments that this Control should apply to for deployments and Coverage views?

Potential options

  1. Default filter to environments that have had a decision recorded for this Control (ever, in time range?).
  • Easy first attempt
  • Need to ensure this gives a realistic coverage (decision recorded ever would be consistent, but how do you remove from filter)
  1. Default filter to environments that have Control mentioned in environment policy.

  2. Add explicit mappings on Controls to environments they apply to that Customers should maintain.

| `--attachments` | Optional evidence file(s) to attach (e.g. an evaluation report, a REGO policy output). |
| `--user-data` | Optional path to a JSON file containing additional structured data to attach to the attestation. |

The decision attestation goes on a trail, like any other attestation. It affects trail compliance: a `--compliant false` decision makes the trail non-compliant. There are no restrictions on which flow or trail a decision can be recorded on — place it wherever makes sense in your process, typically at the point where the decision is actually being made (e.g. during a release preparation or promotion step).
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should there be any distinctions around how a decision attestation appears on a trail.

Can it be given a named slot?

Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
Comment thread tutorials/working_with_controls.mdx Outdated
pbeckham and others added 2 commits April 23, 2026 14:27
…tutorial

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
pbeckham and others added 2 commits April 23, 2026 16:00
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…onment

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
pbeckham and others added 4 commits April 23, 2026 16:09
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…policy/v1

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…identifier

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants