Glossary

Solution Pack

A versioned, signed bundle of a governed solution you can verify and re-deploy.

category ▸ Distribution

audit/verify
#101hash ✓#102hash ✓#103hash ✓#104hash ✓#105hash ✓
head 0x9f3a…c1ok: true
verifyChain ▸ chained SHA-256 · signed receipts
What it means

Solution Pack, in plain language.

A solution pack is a portable artifact that captures a complete governed solution — its object types, policies, actions, and agent definitions — as a single versioned, signed bundle. It is how a tested configuration moves between environments or organizations without copy-pasting settings by hand.

Packs make governance shippable. Rather than reproducing a solution by re-clicking through a console, you export it once, verify its integrity, and import it elsewhere — with confidence that what you deployed is exactly what was built, because the bundle is signed.

In Cortex

How Cortex implements it.

This term isn't abstract here — it maps to a real capability in the runtime. Here is exactly how Cortex enforces or relates to it.

Distribution

Cortex packs bundle ontology types, policy rules, and action definitions (and agent metadata for reference), hash the canonicalized contents into a content hash, and sign it with HMAC-SHA256. verifyPack checks both the hash and the signature, so any tamper breaks hashOk and any wrong secret breaks signatureOk.

Import verifies first and refuses an invalid pack (409), then idempotently upserts the definitions into the caller's own tenant — an import preview shows a per-section diff of added, changed, and unchanged items before you apply.

See Solution Pack enforced, not just defined.

Book a walkthrough and watch the controls in this glossary return real verdicts, seal real evidence, and trace every fact back to its source.