Skip to main content

Signature

Description

Returns the child-policy IDs stored for policyId in the order they were last written. The registry preserves caller ordering verbatim and does not sort or deduplicate entries. Returns an empty array for simple policies, built-in sentinels (ALWAYS_ALLOW, ALWAYS_BLOCK), unknown IDs, and malformed IDs. Never reverts. An empty return unambiguously means “not a composite.”

Parameters

Returns

Behavior notes

  • Evaluation is live. Each isAuthorized call on a composite reads the child IDs returned by this function at call time — not a snapshot from creation or the last updateComposite.
  • Child IDs are packed four per 256-bit slot. The two-to-four-child constraint means each composite occupies one element slot in the children mapping.
  • Duplicate child IDs are preserved; the registry does not deduplicate them.

Access control

Read-only. No caller restrictions.

Policy interaction

This is part of the singleton PolicyRegistry surface used by B20 policy scopes.

Example

Title Query composite children