coulomb/approval-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
approval-engine/adapters/go/approvalfact/testdata/owner-vectors.json
tegwick 3485415b82 Add producer-owned Go approval fact validation and canonical vectors 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
2026-10-16 16:25:54 +02:00

2305 lines
85 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

{
"producer_revision": "eece796b8bbee19551f6aa07ad389cbf83cabcdb",
"fixture_only": true,
"source": "Engine.claim with fixed synthetic identities; mutated consumer refusal cases explicitly labeled; no native identity admission",
"schema_version": "0.1",
"claim_cases": [
{
"name": "fresh_out_of_band_observation_unchanged_original",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": true,
"reason": "matching_valid_facts_original_digest_unchanged"
},
{
"name": "requested",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "requested",
"valid_now": false,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "requested"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "insufficient_distinct_humans",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "requested",
"valid_now": false,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "requested"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "foreign_issuer",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "foreign",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "foreign_id",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "22222222-2222-4222-8222-222222222222",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "nonhuman_control",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": false
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "legacy_missing_human_control",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "human_control_integer",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": 1
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "wrong_pdp_digest",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:abababababababababababababababababababababababababababababababab",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "null_pdp_digest",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": null,
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "undeclared_pdp_path",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": false,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "valid_now_integer",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": 1,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "wrong_native_digest",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:abababababababababababababababababababababababababababababababab",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "wrong_act",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "other",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "future_observation",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:06+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "inconsistent_ttl",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 31,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "zero_ttl",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 0,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "naive_observation",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "original_observation_expired_even_when_provider_fresh",
"validation_time": "2026-08-29T12:00:30+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "refetch_cannot_extend_original_freshness",
"validation_time": "2026-08-29T12:00:30+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:30+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:01:00+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "consumed_source",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "consumed",
"valid_now": false,
"consumed": true,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:05+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:35+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "consumed"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "expired_after_consumption_preserves_consumed_true",
"validation_time": "2026-08-30T12:00:00+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "valid",
"valid_now": true,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "ok"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "11111111-1111-4111-8111-111111111111",
"state": "expired",
"valid_now": false,
"consumed": true,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-30T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-30T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "expired"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "source_fact_refusal"
},
{
"name": "source_revoked",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "6302eb08-215e-4a17-8e6f-66717874c6af",
"state": "revoked",
"valid_now": false,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "revoked"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "6302eb08-215e-4a17-8e6f-66717874c6af",
"state": "revoked",
"valid_now": false,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "revoked"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "terminal_source_refusal"
},
{
"name": "source_superseded",
"validation_time": "2026-08-29T12:00:05+00:00",
"submitted_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "8c8f9c0f-b2dd-4a1f-964a-54ac7022803b",
"state": "superseded",
"valid_now": false,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "superseded"
},
"observed_claim": {
"schema_version": "0.1",
"kind": "approval-claim",
"yields_to": "net-kingdom taxonomy request-claim schema (statute §17; unassigned)",
"issuer": "approval-engine",
"approval_id": "8c8f9c0f-b2dd-4a1f-964a-54ac7022803b",
"state": "superseded",
"valid_now": false,
"consumed": false,
"binding": {
"action": "secrets.kv.destroy",
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"digest": "sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b",
"pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"pdp_path": true,
"human_control": true
},
"freshness": {
"observed_at": "2026-08-29T12:00:00+00:00",
"ttl_seconds": 30,
"not_after": "2026-08-29T12:00:30+00:00"
},
"validity": {
"not_before": "2026-08-29T11:00:00+00:00",
"expires_at": "2026-08-29T15:00:00+00:00"
},
"reason_code": "superseded"
},
"expected_binding": {
"action": "secrets.kv.destroy",
"target": {
"id": "lane-openbao-root",
"stage": "prod"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"expected_pdp_digest": "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
"expected_accept": false,
"reason": "terminal_source_refusal"
}
],
"native_binding_vectors": [
{
"input_target_json": "{\"value\":true}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": true
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":true}}",
"native_digest": "sha256:e1f537daa849e5da023efb5f3d62cc33d94cce20f9ca9c5a708c76e225fd702f"
},
{
"input_target_json": "{\"value\":1}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": 1
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1}}",
"native_digest": "sha256:3a3d2da6267e4b917505a7c2247e6ce36fd8ee074eef37251bcc66839b602332"
},
{
"input_target_json": "{\"value\":1.0}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": 1.0
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1.0}}",
"native_digest": "sha256:21c2cdb9b161071ebfe361e50703511b2abf6c6f327f153282d247aa92c3898e"
},
{
"input_target_json": "{\"value\":false}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": false
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":false}}",
"native_digest": "sha256:278cbcd013f7923db5258dd860f911d688505a8259f15ccb77983b044f312c74"
},
{
"input_target_json": "{\"value\":0}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": 0
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":0}}",
"native_digest": "sha256:e691b8fb55d4bf82a310dee37c045331100c8031e26ea6f51bdcceeeb3b1f20e"
},
{
"input_target_json": "{\"value\":-0.0}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": -0.0
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":-0.0}}",
"native_digest": "sha256:eccde458c686bff67506bb2d94c750e648a311bf23967cb22b37f11e84b6844f"
},
{
"input_target_json": "{\"value\":1e-7}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": 1e-07
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1e-07}}",
"native_digest": "sha256:779042b6c0e675f6aacdcd3a02199aab66f534bb84dd410a95c18657afae563c"
},
{
"input_target_json": "{\"value\":1e-6}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": 1e-06
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1e-06}}",
"native_digest": "sha256:d021f402231fcd59e764b31e6f08a5298ebb328dfd93da58ecde8feb11fde0b5"
},
{
"input_target_json": "{\"value\":1e20}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": 1e+20
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1e+20}}",
"native_digest": "sha256:14270ffca4ab10e9d9302d52e988b4aa3e2facd494c12a60e2edafef70277a20"
},
{
"input_target_json": "{\"value\":1e21}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": 1e+21
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":1e+21}}",
"native_digest": "sha256:75a60a595b2578430b0be466b6bf9a46b62ddc99bbbcebd7fa0e8d22e3078c0a"
},
{
"input_target_json": "{\"value\":2.5e-7}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": 2.5e-07
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":2.5e-07}}",
"native_digest": "sha256:50af37ff75a3e7a22629e746f814995c0c2cd96adb7f1ed5b26999b71d0ac498"
},
{
"input_target_json": "{\"value\":9007199254740993}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"value": 9007199254740993
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"value\":9007199254740993}}",
"native_digest": "sha256:765360dc5a1d949bd114c6b749d83069123d8b4b6b1d939f831428a800f50dab"
},
{
"input_target_json": "{\"html\":\"<>&\", \"unicode\":\"é雪😀\", \"separator\":\"\\u2028\\u2029\"}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"html": "<>&",
"unicode": "é雪😀",
"separator": "

"
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"html\":\"<>&\",\"separator\":\"

\",\"unicode\":\"é雪😀\"}}",
"native_digest": "sha256:c203d934743e2954342038a3746b6c37a0f3101e886ef855b1c6ad824adf5dea"
},
{
"input_target_json": "{\"b\":[true,1,1.0,null,{\"z\":\"x\",\"a\":\"y\"}],\"a\":{}}",
"binding": {
"action": "secrets.kv.destroy",
"target": {
"b": [
true,
1,
1.0,
null,
{
"z": "x",
"a": "y"
}
],
"a": {}
},
"actor": "agt-secrets-engine",
"principal": "bernd",
"purpose": "rotate-exposed-key"
},
"canonical_binding_utf8": "{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"a\":{},\"b\":[true,1,1.0,null,{\"a\":\"y\",\"z\":\"x\"}]}}",
"native_digest": "sha256:56306505c882af6edfae5f3d2a5b42e92737a0859236fe5574a21d1874655d51"
}
],
"transport_cases": [
{
"name": "duplicate_valid_now",
"status": 200,
"content_type": "application/json",
"body_utf8": "{\"schema_version\":\"0.1\",\"kind\":\"approval-claim\",\"yields_to\":\"net-kingdom taxonomy request-claim schema (statute §17; unassigned)\",\"issuer\":\"approval-engine\",\"approval_id\":\"11111111-1111-4111-8111-111111111111\",\"state\":\"valid\",\"valid_now\":true,\"consumed\":false,\"binding\":{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"id\":\"lane-openbao-root\",\"stage\":\"prod\"},\"digest\":\"sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b\",\"pdp_digest\":\"sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd\",\"pdp_path\":true,\"human_control\":true},\"freshness\":{\"observed_at\":\"2026-08-29T12:00:05+00:00\",\"ttl_seconds\":30,\"not_after\":\"2026-08-29T12:00:35+00:00\"},\"validity\":{\"not_before\":\"2026-08-29T11:00:00+00:00\",\"expires_at\":\"2026-08-29T15:00:00+00:00\"},\"reason_code\":\"ok\",\"valid_now\":false}",
"expected_accept": false
},
{
"name": "nonfinite_json",
"status": 200,
"content_type": "application/json",
"body_utf8": "{\"schema_version\":\"0.1\",\"kind\":\"approval-claim\",\"yields_to\":\"net-kingdom taxonomy request-claim schema (statute §17; unassigned)\",\"issuer\":\"approval-engine\",\"approval_id\":\"11111111-1111-4111-8111-111111111111\",\"state\":\"valid\",\"valid_now\":true,\"consumed\":false,\"binding\":{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"id\":\"lane-openbao-root\",\"stage\":\"prod\"},\"digest\":\"sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b\",\"pdp_digest\":\"sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd\",\"pdp_path\":true,\"human_control\":true},\"freshness\":{\"observed_at\":\"2026-08-29T12:00:05+00:00\",\"ttl_seconds\":NaN,\"not_after\":\"2026-08-29T12:00:35+00:00\"},\"validity\":{\"not_before\":\"2026-08-29T11:00:00+00:00\",\"expires_at\":\"2026-08-29T15:00:00+00:00\"},\"reason_code\":\"ok\"}",
"expected_accept": false
},
{
"name": "redirect",
"status": 302,
"location": "https://foreign.example/claim",
"expected_accept": false,
"required_secondary_requests": 0
},
{
"name": "wrong_media_type",
"status": 200,
"content_type": "text/plain",
"body_utf8": "{\"schema_version\":\"0.1\",\"kind\":\"approval-claim\",\"yields_to\":\"net-kingdom taxonomy request-claim schema (statute §17; unassigned)\",\"issuer\":\"approval-engine\",\"approval_id\":\"11111111-1111-4111-8111-111111111111\",\"state\":\"valid\",\"valid_now\":true,\"consumed\":false,\"binding\":{\"action\":\"secrets.kv.destroy\",\"actor\":\"agt-secrets-engine\",\"principal\":\"bernd\",\"purpose\":\"rotate-exposed-key\",\"target\":{\"id\":\"lane-openbao-root\",\"stage\":\"prod\"},\"digest\":\"sha256:0982954d4ecbaad0c7368c207ec530e51d7508c3304b67c10885d112175f929b\",\"pdp_digest\":\"sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd\",\"pdp_path\":true,\"human_control\":true},\"freshness\":{\"observed_at\":\"2026-08-29T12:00:05+00:00\",\"ttl_seconds\":30,\"not_after\":\"2026-08-29T12:00:35+00:00\"},\"validity\":{\"not_before\":\"2026-08-29T11:00:00+00:00\",\"expires_at\":\"2026-08-29T15:00:00+00:00\"},\"reason_code\":\"ok\"}",
"expected_accept": false
},
{
"name": "provider_unavailable",
"status": 503,
"expected_accept": false
},
{
"name": "declared_body_over_limit",
"status": 200,
"content_length": 1048577,
"consumer_limit_bytes": 1048576,
"expected_accept": false
},
{
"name": "environment_proxy_configured",
"required_environment_proxy_requests": 0,
"expected_accept": false,
"note": "If fixed origin is unavailable, proxy cannot supply a replacement fact."
}
]
}
Reference in a new issue View git blame Copy permalink