emergent-security/envelopes/examples/tenant-governance-acme.yaml

17 lines
556 B
YAML

# Example tenant governance envelope (canon B11). Tenant-owned; may only narrow
# envelope://platform/tenant/acme.
apiVersion: emergent-security/v0.8
kind: TenantGovernance
tenant: tenant://acme
mode: self_governed
bounded_by: envelope://platform/tenant/acme
established_by: human://acme/admin-1
restrictions:
prohibitions: [dependency.add]
ceilings:
blast_radius: repository
human_decision_classes:
- deploy.tenant_runtime
escalation_target: [human://acme/admin-1, human://acme/admin-2]
deadline_default: 24h
on_deadline: escalate_to_next_admin