What is policy decision point?
In short:A policy decision point is the component that evaluates a request against rules and returns a verdict. It does not touch traffic itself. Separating decision from enforcement lets one set of rules govern many gateways, SDKs and apps, which keeps behaviour consistent across tools.
How does it work?
It receives the identity, action, resource and context, then returns allow, deny or a condition such as approval.
What does it look like in practice?
Descope's policy engine v2 adds Deny policies that any enforcement point can query.