Admit exact T03 human review mandate with caller-bound policy
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
parent
8dcdecf6cf
commit
e62c0cfc36
10 changed files with 585 additions and 0 deletions
47
docs/evidence/2026-09-14-t03-native-review-policy.json
Normal file
47
docs/evidence/2026-09-14-t03-native-review-policy.json
Normal file
|
|
@ -0,0 +1,47 @@
|
|||
{
|
||||
"scope": "native caller and policy with synthetic subject claims; not real human approval",
|
||||
"checks": [
|
||||
{
|
||||
"action": "apply",
|
||||
"case": "admitted-group",
|
||||
"effect": "allow",
|
||||
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||||
"caller": "system:serviceaccount:informed-decision:review"
|
||||
},
|
||||
{
|
||||
"action": "apply",
|
||||
"case": "unrelated-group",
|
||||
"effect": "deny",
|
||||
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||||
"caller": "system:serviceaccount:informed-decision:review"
|
||||
},
|
||||
{
|
||||
"action": "verify",
|
||||
"case": "admitted-group",
|
||||
"effect": "allow",
|
||||
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||||
"caller": "system:serviceaccount:informed-decision:review"
|
||||
},
|
||||
{
|
||||
"action": "verify",
|
||||
"case": "unrelated-group",
|
||||
"effect": "deny",
|
||||
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||||
"caller": "system:serviceaccount:informed-decision:review"
|
||||
},
|
||||
{
|
||||
"action": "exec",
|
||||
"case": "admitted-group",
|
||||
"effect": "allow",
|
||||
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||||
"caller": "system:serviceaccount:informed-decision:review"
|
||||
},
|
||||
{
|
||||
"action": "exec",
|
||||
"case": "unrelated-group",
|
||||
"effect": "deny",
|
||||
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||||
"caller": "system:serviceaccount:informed-decision:review"
|
||||
}
|
||||
]
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue