flex-auth/examples/secrets-engine/check_request_allow_destroy_dual_control.json

{
  "id": "check:secrets-engine-destroy",
  "tenant": "tenant:platform",
  "subject": {
    "id": "secrets-engine",
    "type": "service"
  },
  "action": "destroy",
  "resource": {
    "id": "lane:glas-primary",
    "type": "secret-catalog-lane",
    "system": "secrets-engine",
    "attributes": {
      "stage": "prod",
      "fields": [],
      "policy_targets": [],
      "auth_targets": []
    }
  },
  "context": {
    "approval": {
      "status": "approved",
      "approvals": [
        {
          "subject_id": "human:alice"
        },
        {
          "subject_id": "human:bob"
        }
      ]
    }
  }
}