35 lines
1.3 KiB
YAML
35 lines
1.3 KiB
YAML
# Example platform tenant envelope (canon B10). Platform-owned; read-only to the tenant.
|
|
apiVersion: emergent-security/v0.8
|
|
kind: PlatformTenantEnvelope
|
|
id: envelope://platform/tenant/acme
|
|
tenant: tenant://acme
|
|
owner: L3
|
|
version: 7
|
|
capabilities: # every class the tenant can reach at all
|
|
- code.edit
|
|
- test.add
|
|
- git.commit_feature
|
|
- git.push_feature
|
|
- dependency.add
|
|
- deploy.tenant_runtime
|
|
- data.tenant_own
|
|
delegated: # subset of capabilities decided autonomously by platform delegation
|
|
code.edit: { mode: autonomous }
|
|
test.add: { mode: autonomous }
|
|
git.commit_feature: { mode: autonomous }
|
|
git.push_feature: { mode: autonomous }
|
|
dependency.add: { mode: autonomous_with_obligations, evidence_required: [lockfile_updated], obligations: [record] }
|
|
deploy.tenant_runtime:
|
|
mode: autonomous_with_obligations
|
|
evidence_required: [tests, provenance]
|
|
obligations: [record, verify_provenance]
|
|
ceilings:
|
|
blast_radius: tenant
|
|
tenant_reach: own
|
|
data_sensitivity: personal
|
|
irreversible: false
|
|
external_exposure: published_endpoints_only
|
|
prohibitions: # classes the tenant may never perform, in any mode
|
|
- deploy.public
|
|
- iam.platform_change
|
|
escalation_target: platform
|