access-engine/examples/tenant-engine/check_request_allow_guardrail_set.json

{
  "id": "check:tenant-engine-guardrail-set-writer",
  "tenant": "tenant:friendly:binky",
  "subject": {
    "id": "tenant-engine",
    "type": "service"
  },
  "action": "tenant.guardrail.set",
  "resource": {
    "id": "t-1",
    "type": "guardrail",
    "system": "tenant-engine"
  },
  "context": {}
}