Signature
Description
Returns the child-policy IDs stored forpolicyId in the order they were last written. The registry preserves caller ordering verbatim and does not sort or deduplicate entries.
Returns an empty array for simple policies, built-in sentinels (ALWAYS_ALLOW, ALWAYS_BLOCK), unknown IDs, and malformed IDs. Never reverts. An empty return unambiguously means “not a composite.”
Parameters
Returns
Behavior notes
- Evaluation is live. Each
isAuthorizedcall on a composite reads the child IDs returned by this function at call time — not a snapshot from creation or the lastupdateComposite. - Child IDs are packed four per 256-bit slot. The two-to-four-child constraint means each composite occupies one element slot in the
childrenmapping. - Duplicate child IDs are preserved; the registry does not deduplicate them.
Access control
Read-only. No caller restrictions.Policy interaction
This is part of the singletonPolicyRegistry surface used by B20 policy scopes.
Example
Title Query composite children