Overview
The Policy Inspector is a diagnostic tool designed to provide administrators with complete transparency into how the Fireblocks Policy Engine evaluates transactions. As policies grow in complexity, the Inspector removes the guesswork by showing exactly how transaction properties such as source, destination, asset, and amount align with your specific policy rule parameters.
Note:
Currently the Policy inspector is available only for transactions of type TRANSFER.
Why use the policy inspector?
- Troubleshoot blocked transactions: Pinpoint exactly why a transaction failed to match your rules and identify which specific criteria were not met.
- Resolve rule mismatches: If, as it was transmitted, a transaction matched "Rule X" instead of your intended "Rule Y," use the side-by-side breakdown to see where the logic diverged.
- Test policy changes safely: Verify your logic by re-evaluating a previously blocked transaction against a newly updated policy before going live.
- Optimize policy logic: Audit your rule hierarchy and execution flow to ensure workspace security aligns perfectly with your intent.
Accessing the inspector
You can launch the policy inspector from three locations within the Fireblocks Console:
- Policy overview: A new view showing recent transactions; select any entry to drill down into the logic.
- Transaction bar: Quickly inspect active or recent transactions directly from the side panel.
- Transaction history: Access the evaluation path for any historical transaction for auditing purposes.
Important technical considerations
Before you begin troubleshooting, keep the following logic in mind:
- The simulation engine: The inspector runs on a specialized simulation engine. It mimics the logic of the Fireblocks policy engine to show you the evaluation path without actually executing a new transaction.
- Evaluation against "latest policy": The inspector always evaluates transactions against the currently active policy. It does not use the version of the policy that was in effect at the time the original transaction occurred.
Note:
If your policy was modified since the transaction took place, the simulation result may differ from the actual historical outcome.
Availability & rollout
The policy inspector is gradually rolling out to all customers.