Summary

Harness should let teams configure notifications and alerts when an OPA policy evaluates to warn and continue (soft gate). Pipeline notification events today fire only on outcomes such as failure or success. A warning triggers none of them, so the people who need to act on it never find out.

Background and use case

We use a phased approach to security and quality gating. Policies are first deployed in warn and continue mode so teams can see violations and remediate them without blocking delivery. Once teams are ready, the policies move to error and exit (hard gate).

This approach depends on teams knowing when a warning has occurred. Without notification, a warning is only visible if someone opens the pipeline execution and reads the policy evaluation output. In practice, most teams never see it.