access-engine/examples/secrets-engine-service-task-execution/policy_fixtures.yaml
tegwick bc92f95e5f
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Container Image / build-and-push (push) Successful in 59s
Prepare closed service task execution input and policy contract
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 19:48:53 +02:00

8 lines
391 B
YAML

- id: unsigned-service-caller-not-authority
request:
tenant: tenant:platform
subject: {id: secrets-engine, type: service}
action: execute-ccr
resource: {id: catalog:test, type: secret-catalog-lane, system: secrets-engine}
context: {human_control: true, runtime_admission: true, verified: true}
expect: {effect: deny, reason: service_execution_integration_unadmitted}