{ "producer_revision": "eece796b8bbee19551f6aa07ad389cbf83cabcdb", "fixture_only": true, "source": "Engine.claim with fixed synthetic identities; mutated consumer refusal cases explicitly labeled; no native identity admission", "schema_version": "0.1", "claim_cases": [ { "name": "fresh_out_of_band_observation_unchanged_original", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": true, "reason": "matching_valid_facts_original_digest_unchanged" }, { "name": "requested", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "requested", "valid_now": false, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "requested" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "insufficient_distinct_humans", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "requested", "valid_now": false, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "requested" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "foreign_issuer", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "foreign", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "foreign_id", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "22222222-2222-4222-8222-222222222222", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "nonhuman_control", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": false }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "legacy_missing_human_control", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "human_control_integer", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": 1 }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "wrong_pdp_digest", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:abababababababababababababababababababababababababababababababab", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "null_pdp_digest", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": null, "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "undeclared_pdp_path", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": false, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "valid_now_integer", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": 1, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "wrong_native_digest", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:abababababababababababababababababababababababababababababababab", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "wrong_act", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "other", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "future_observation", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:06+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "inconsistent_ttl", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 31, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "zero_ttl", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 0, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "naive_observation", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "original_observation_expired_even_when_provider_fresh", "validation_time": "2026-08-29T12:00:30+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "refetch_cannot_extend_original_freshness", "validation_time": "2026-08-29T12:00:30+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:30+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:01:00+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "consumed_source", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "consumed", "valid_now": false, "consumed": true, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:05+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:35+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "consumed" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "expired_after_consumption_preserves_consumed_true", "validation_time": "2026-08-30T12:00:00+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "valid", "valid_now": true, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "ok" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "11111111-1111-4111-8111-111111111111", "state": "expired", "valid_now": false, "consumed": true, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-30T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-30T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "expired" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "source_fact_refusal" }, { "name": "source_revoked", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "6302eb08-215e-4a17-8e6f-66717874c6af", "state": "revoked", "valid_now": false, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "revoked" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "6302eb08-215e-4a17-8e6f-66717874c6af", "state": "revoked", "valid_now": false, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "revoked" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "terminal_source_refusal" }, { "name": "source_superseded", "validation_time": "2026-08-29T12:00:05+00:00", "submitted_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "8c8f9c0f-b2dd-4a1f-964a-54ac7022803b", "state": "superseded", "valid_now": false, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "superseded" }, "observed_claim": { "schema_version": "0.1", "kind": "approval-claim", "yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)", "issuer": "approval-engine", "approval_id": "8c8f9c0f-b2dd-4a1f-964a-54ac7022803b", "state": "superseded", "valid_now": false, "consumed": false, "binding": { "action": "secrets.kv.destroy", "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key", "target": { "id": "lane-openbao-root", "stage": "prod" }, "digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b", "pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "pdp_path": true, "human_control": true }, "freshness": { "observed_at": "2026-08-29T12:00:00+00:00", "ttl_seconds": 30, "not_after": "2026-08-29T12:00:30+00:00" }, "validity": { "not_before": "2026-08-29T11:00:00+00:00", "expires_at": "2026-08-29T15:00:00+00:00" }, "reason_code": "superseded" }, "expected_binding": { "action": "secrets.kv.destroy", "target": { "id": "lane-openbao-root", "stage": "prod" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd", "expected_accept": false, "reason": "terminal_source_refusal" } ], "native_binding_vectors": [ { "input_target_json": "{\"value\":true}", "binding": { "action": "secrets.kv.destroy", "target": { "value": true }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":true}}", "native_digest": "sha256:e1f537daa849e5da023efb5f3d62cc33d94cce20f9ca9c5a708c76e225fd702f" }, { "input_target_json": "{\"value\":1}", "binding": { "action": "secrets.kv.destroy", "target": { "value": 1 }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1}}", "native_digest": "sha256:3a3d2da6267e4b917505a7c2247e6ce36fd8ee074eef37251bcc66839b602332" }, { "input_target_json": "{\"value\":1.0}", "binding": { "action": "secrets.kv.destroy", "target": { "value": 1.0 }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1.0}}", "native_digest": "sha256:21c2cdb9b161071ebfe361e50703511b2abf6c6f327f153282d247aa92c3898e" }, { "input_target_json": "{\"value\":false}", "binding": { "action": "secrets.kv.destroy", "target": { "value": false }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":false}}", "native_digest": "sha256:278cbcd013f7923db5258dd860f911d688505a8259f15ccb77983b044f312c74" }, { "input_target_json": "{\"value\":0}", "binding": { "action": "secrets.kv.destroy", "target": { "value": 0 }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":0}}", "native_digest": "sha256:e691b8fb55d4bf82a310dee37c045331100c8031e26ea6f51bdcceeeb3b1f20e" }, { "input_target_json": "{\"value\":-0.0}", "binding": { "action": "secrets.kv.destroy", "target": { "value": -0.0 }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":-0.0}}", "native_digest": "sha256:eccde458c686bff67506bb2d94c750e648a311bf23967cb22b37f11e84b6844f" }, { "input_target_json": "{\"value\":1e-7}", "binding": { "action": "secrets.kv.destroy", "target": { "value": 1e-07 }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1e-07}}", "native_digest": "sha256:779042b6c0e675f6aacdcd3a02199aab66f534bb84dd410a95c18657afae563c" }, { "input_target_json": "{\"value\":1e-6}", "binding": { "action": "secrets.kv.destroy", "target": { "value": 1e-06 }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1e-06}}", "native_digest": "sha256:d021f402231fcd59e764b31e6f08a5298ebb328dfd93da58ecde8feb11fde0b5" }, { "input_target_json": "{\"value\":1e20}", "binding": { "action": "secrets.kv.destroy", "target": { "value": 1e+20 }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1e+20}}", "native_digest": "sha256:14270ffca4ab10e9d9302d52e988b4aa3e2facd494c12a60e2edafef70277a20" }, { "input_target_json": "{\"value\":1e21}", "binding": { "action": "secrets.kv.destroy", "target": { "value": 1e+21 }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1e+21}}", "native_digest": "sha256:75a60a595b2578430b0be466b6bf9a46b62ddc99bbbcebd7fa0e8d22e3078c0a" }, { "input_target_json": "{\"value\":2.5e-7}", "binding": { "action": "secrets.kv.destroy", "target": { "value": 2.5e-07 }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":2.5e-07}}", "native_digest": "sha256:50af37ff75a3e7a22629e746f814995c0c2cd96adb7f1ed5b26999b71d0ac498" }, { "input_target_json": "{\"value\":9007199254740993}", "binding": { "action": "secrets.kv.destroy", "target": { "value": 9007199254740993 }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":9007199254740993}}", "native_digest": "sha256:765360dc5a1d949bd114c6b749d83069123d8b4b6b1d939f831428a800f50dab" }, { "input_target_json": "{\"html\":\"<>&\", \"unicode\":\"é雪😀\", \"separator\":\"\\u2028\\u2029\"}", "binding": { "action": "secrets.kv.destroy", "target": { "html": "<>&", "unicode": "é雪😀", "separator": "

" }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"html\":\"<>&\",\"separator\":\"

\",\"unicode\":\"é雪😀\"}}", "native_digest": "sha256:c203d934743e2954342038a3746b6c37a0f3101e886ef855b1c6ad824adf5dea" }, { "input_target_json": "{\"b\":[true,1,1.0,null,{\"z\":\"x\",\"a\":\"y\"}],\"a\":{}}", "binding": { "action": "secrets.kv.destroy", "target": { "b": [ true, 1, 1.0, null, { "z": "x", "a": "y" } ], "a": {} }, "actor": "agt-secrets-engine", "principal": "bernd", "purpose": "rotate-exposed-key" }, "canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"a\":{},\"b\":[true,1,1.0,null,{\"a\":\"y\",\"z\":\"x\"}]}}", "native_digest": "sha256:56306505c882af6edfae5f3d2a5b42e92737a0859236fe5574a21d1874655d51" } ], "transport_cases": [ { "name": "duplicate_valid_now", "status": 200, "content_type": "application/json", "body_utf8": "{\"schema_version\":\"0.1\",\"kind\":\"approval-claim\",\"yields_to\":\"net-kingdom taxonomy request-claim schema (statute §17; unassigned)\",\"issuer\":\"approval-engine\",\"approval_id\":\"11111111-1111-4111-8111-111111111111\",\"state\":\"valid\",\"valid_now\":true,\"consumed\":false,\"binding\":{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"id\":\"lane-openbao-root\",\"stage\":\"prod\"},\"digest\":\"sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b\",\"pdp_digest\":\"sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd\",\"pdp_path\":true,\"human_control\":true},\"freshness\":{\"observed_at\":\"2026-08-29T12:00:05+00:00\",\"ttl_seconds\":30,\"not_after\":\"2026-08-29T12:00:35+00:00\"},\"validity\":{\"not_before\":\"2026-08-29T11:00:00+00:00\",\"expires_at\":\"2026-08-29T15:00:00+00:00\"},\"reason_code\":\"ok\",\"valid_now\":false}", "expected_accept": false }, { "name": "nonfinite_json", "status": 200, "content_type": "application/json", "body_utf8": "{\"schema_version\":\"0.1\",\"kind\":\"approval-claim\",\"yields_to\":\"net-kingdom taxonomy request-claim schema (statute §17; unassigned)\",\"issuer\":\"approval-engine\",\"approval_id\":\"11111111-1111-4111-8111-111111111111\",\"state\":\"valid\",\"valid_now\":true,\"consumed\":false,\"binding\":{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"id\":\"lane-openbao-root\",\"stage\":\"prod\"},\"digest\":\"sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b\",\"pdp_digest\":\"sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd\",\"pdp_path\":true,\"human_control\":true},\"freshness\":{\"observed_at\":\"2026-08-29T12:00:05+00:00\",\"ttl_seconds\":NaN,\"not_after\":\"2026-08-29T12:00:35+00:00\"},\"validity\":{\"not_before\":\"2026-08-29T11:00:00+00:00\",\"expires_at\":\"2026-08-29T15:00:00+00:00\"},\"reason_code\":\"ok\"}", "expected_accept": false }, { "name": "redirect", "status": 302, "location": "https://foreign.example/claim", "expected_accept": false, "required_secondary_requests": 0 }, { "name": "wrong_media_type", "status": 200, "content_type": "text/plain", "body_utf8": "{\"schema_version\":\"0.1\",\"kind\":\"approval-claim\",\"yields_to\":\"net-kingdom taxonomy request-claim schema (statute §17; unassigned)\",\"issuer\":\"approval-engine\",\"approval_id\":\"11111111-1111-4111-8111-111111111111\",\"state\":\"valid\",\"valid_now\":true,\"consumed\":false,\"binding\":{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"id\":\"lane-openbao-root\",\"stage\":\"prod\"},\"digest\":\"sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b\",\"pdp_digest\":\"sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd\",\"pdp_path\":true,\"human_control\":true},\"freshness\":{\"observed_at\":\"2026-08-29T12:00:05+00:00\",\"ttl_seconds\":30,\"not_after\":\"2026-08-29T12:00:35+00:00\"},\"validity\":{\"not_before\":\"2026-08-29T11:00:00+00:00\",\"expires_at\":\"2026-08-29T15:00:00+00:00\"},\"reason_code\":\"ok\"}", "expected_accept": false }, { "name": "provider_unavailable", "status": 503, "expected_accept": false }, { "name": "declared_body_over_limit", "status": 200, "content_length": 1048577, "consumer_limit_bytes": 1048576, "expected_accept": false }, { "name": "environment_proxy_configured", "required_environment_proxy_requests": 0, "expected_accept": false, "note": "If fixed origin is unavailable, proxy cannot supply a replacement fact." } ] }