.. _mlflow-security-and-readiness:

Security and readiness
======================

The module exposes :class:`SecurityPolicy` and policy context helpers. Treat
policy configuration as intent and verify the operation path that actually
enforces it.

.. warning::

   The repository maintenance review currently records that the exported
   ``SecurityPolicy`` is not fully connected to session/server operations even
   though its documentation describes that role. Until that runtime finding is
   closed, do not rely on the policy object alone as a security boundary for
   bind/URI/server decisions.

Readiness has several layers: MLflow package installed, CLI flags compatible,
store paths usable, server process started, and tracking endpoint ready. Report
those separately instead of one undifferentiated “available” flag.