access-engine/docs/evidence/2026-10-04-infd-lifecycle/review-policy-validation.json

{
  "valid": true,
  "caring_findings": [
    {
      "code": "CARING-POLICY-MISSING-DIMENSION",
      "severity": "warning",
      "message": "policy package should declare governed canonical roles",
      "fields": [
        "caring.canonical_roles"
      ]
    },
    {
      "code": "CARING-POLICY-MISSING-DIMENSION",
      "severity": "warning",
      "message": "policy package should declare governed organization relations",
      "fields": [
        "caring.organization_relations"
      ]
    },
    {
      "code": "CARING-POLICY-MISSING-DIMENSION",
      "severity": "warning",
      "message": "policy package should declare governed scopes",
      "fields": [
        "caring.scopes"
      ]
    },
    {
      "code": "CARING-POLICY-MISSING-DIMENSION",
      "severity": "warning",
      "message": "policy package should declare governed planes",
      "fields": [
        "caring.planes"
      ]
    },
    {
      "code": "CARING-POLICY-MISSING-DIMENSION",
      "severity": "warning",
      "message": "policy package should declare governed capabilities",
      "fields": [
        "caring.capabilities"
      ]
    },
    {
      "code": "CARING-POLICY-MISSING-DIMENSION",
      "severity": "warning",
      "message": "policy package should declare governed exposure modes",
      "fields": [
        "caring.exposure_modes"
      ]
    },
    {
      "code": "CARING-POLICY-MISSING-DIMENSION",
      "severity": "warning",
      "message": "policy package should declare governed conditions",
      "fields": [
        "caring.conditions"
      ]
    },
    {
      "code": "CARING-POLICY-MISSING-DIMENSION",
      "severity": "warning",
      "message": "policy package should declare governed restrictions",
      "fields": [
        "caring.restrictions"
      ]
    }
  ],
  "tests": [
    {
      "name": "test_allow_does_not_prove_the_pin",
      "passed": true
    },
    {
      "name": "test_approval_id_malformed",
      "passed": true
    },
    {
      "name": "test_attribute_acts_are_eligible_only_when_sets_admit",
      "passed": true
    },
    {
      "name": "test_bad_memo_id_refused",
      "passed": true
    },
    {
      "name": "test_digest_mismatch",
      "passed": true
    },
    {
      "name": "test_exact_pin_mismatch_is_not_rescued",
      "passed": true
    },
    {
      "name": "test_exact_record_ignores_attribute_context",
      "passed": true
    },
    {
      "name": "test_future_mfa_is_identity_refused",
      "passed": true
    },
    {
      "name": "test_human_control_false",
      "passed": true
    },
    {
      "name": "test_initial_release_allows_only_decision_record_class",
      "passed": true
    },
    {
      "name": "test_initial_release_sets",
      "passed": true
    },
    {
      "name": "test_list_does_not_use_attribute_admission",
      "passed": true
    },
    {
      "name": "test_listable_is_exact_union",
      "passed": true
    },
    {
      "name": "test_memo_review_group_is_not_hardcoded",
      "passed": true
    },
    {
      "name": "test_memo_version_refused",
      "passed": true
    },
    {
      "name": "test_requester_mismatch",
      "passed": true
    },
    {
      "name": "test_review_group_must_be_verified",
      "passed": true
    },
    {
      "name": "test_service_subject_is_identity_refused",
      "passed": true
    },
    {
      "name": "test_six_exact_metered_memos_allow_human_review",
      "passed": true
    },
    {
      "name": "test_stale_mfa_on_attribute_branch",
      "passed": true
    },
    {
      "name": "test_t03_records_not_in_act_scope",
      "passed": true
    },
    {
      "name": "test_tool_proof_exact_record_allowed",
      "passed": true
    },
    {
      "name": "test_tool_proof_without_mfa_denied",
      "passed": true
    },
    {
      "name": "test_tool_proof_wrong_digest_denied",
      "passed": true
    },
    {
      "name": "test_tool_proof_wrong_native_id_denied",
      "passed": true
    },
    {
      "name": "test_unknown_class",
      "passed": true
    },
    {
      "name": "test_unknown_request_denied",
      "passed": true
    },
    {
      "name": "test_unknown_submitter",
      "passed": true
    }
  ],
  "fixtures": [
    {
      "id": "unknown-request-denied",
      "passed": true,
      "expected": {
        "effect": "deny"
      },
      "actual": {
        "effect": "deny",
        "reason": "compact_sitting_scope_or_identity_refused"
      }
    },
    {
      "id": "attribute-non-human-refused",
      "passed": true,
      "expected": {
        "effect": "deny",
        "reason": "identity_refused"
      },
      "actual": {
        "effect": "deny",
        "reason": "identity_refused"
      }
    },
    {
      "id": "attribute-stale-mfa",
      "passed": true,
      "expected": {
        "effect": "deny",
        "reason": "stale_mfa"
      },
      "actual": {
        "effect": "deny",
        "reason": "stale_mfa"
      }
    },
    {
      "id": "attribute-future-mfa",
      "passed": true,
      "expected": {
        "effect": "deny",
        "reason": "identity_refused"
      },
      "actual": {
        "effect": "deny",
        "reason": "identity_refused"
      }
    }
  ]
}