flex-auth/docs/evidence/2026-09-15-sitting-native-review-policy.json

{
  "scope": "native caller and policy with synthetic subject claims; not real human approval; T03 deployment unchanged",
  "image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:6da9543d02ff556d5d5e33624599eb26b73ef365ed0e1ee2fac2ad7703b7dcba",
  "caller": "system:serviceaccount:informed-decision:review",
  "service": "flex-auth-informed-decision-sitting.flex-auth.svc.cluster.local:8080",
  "checks": [
    {
      "case": "admitted-group-c02-accept",
      "http": 200,
      "effect": "allow",
      "reason": "operator_admitted_compact_sitting",
      "policy_package": "informed-decision.compact-sitting",
      "policy_package_digest": "sha256:e0afd52e046616a93142f4064704b1cee6496801d94612fce29a958cf04eb41a",
      "ok": true
    },
    {
      "case": "unrelated-group-c02-accept",
      "http": 200,
      "effect": "deny",
      "reason": "compact_sitting_scope_or_identity_refused",
      "policy_package": "informed-decision.compact-sitting",
      "policy_package_digest": "sha256:e0afd52e046616a93142f4064704b1cee6496801d94612fce29a958cf04eb41a",
      "ok": true
    },
    {
      "case": "omitted-c01-accept",
      "http": 200,
      "effect": "deny",
      "reason": "compact_sitting_scope_or_identity_refused",
      "policy_package": "informed-decision.compact-sitting",
      "policy_package_digest": "sha256:e0afd52e046616a93142f4064704b1cee6496801d94612fce29a958cf04eb41a",
      "ok": true
    },
    {
      "case": "t03-memo-accept",
      "http": 200,
      "effect": "deny",
      "reason": "compact_sitting_scope_or_identity_refused",
      "policy_package": "informed-decision.compact-sitting",
      "policy_package_digest": "sha256:e0afd52e046616a93142f4064704b1cee6496801d94612fce29a958cf04eb41a",
      "ok": true
    },
    {
      "case": "consume-c02",
      "http": 200,
      "effect": "deny",
      "reason": "compact_sitting_scope_or_identity_refused",
      "policy_package": "informed-decision.compact-sitting",
      "policy_package_digest": "sha256:e0afd52e046616a93142f4064704b1cee6496801d94612fce29a958cf04eb41a",
      "ok": true
    },
    {
      "case": "missing-token",
      "http": 401,
      "effect": null,
      "reason": "unauthenticated\n",
      "policy_package": null,
      "policy_package_digest": null,
      "ok": true
    }
  ]
}