tegwick
2de0f862f9
v14 (proposed, sha256:8911458f36f1a60598aa19592a2d752a74dffe2617fd86238407ac87bc300fde) keeps every v13 decision and admits approval requester service:nk-bind-executor only from submitter nk-bind-executor, memo class and approval action bounded-execution, an aal2 human reviewer, and never the approval actor itself (GH-DEC-2026-026 class C2). v13 stays unchanged as rollback reference. The admission generator skips present_existing registry rows. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5502@bnt-lap001 Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
17 lines
413 B
JSON
17 lines
413 B
JSON
{
|
|
"subjects": [
|
|
{
|
|
"id": "sitting-reviewer",
|
|
"type": "Human",
|
|
"display_name": "Compact sitting reviewer",
|
|
"organization_relation": "ServiceProvider",
|
|
"groups": ["net-kingdom-admins"],
|
|
"claims": {
|
|
"assurance": "aal2",
|
|
"principal_type_source": "authentication-derived",
|
|
"tenant_source": "registration-supplied"
|
|
}
|
|
}
|
|
],
|
|
"resources": []
|
|
}
|