{
  "schema_version": "0.1",
  "id": "8bfc20be-47a4-4fb0-97a2-bf0a920afad8",
  "status": "approved",
  "request": {
    "id": "check:secrets-engine-destroy-example",
    "subject": {
      "id": "user:alice",
      "type": "Human"
    },
    "action": "destroy",
    "resource": {
      "id": "catalog:example-build-test-token",
      "type": "secret-catalog-lane",
      "system": "secrets-engine",
      "attributes": {
        "stage": "build",
        "fields": ["token"],
        "policy_targets": [],
        "auth_targets": []
      }
    },
    "context": {
      "purpose": "contract-test"
    }
  },
  "validity": {
    "not_before": "2026-08-23T10:00:00Z",
    "expires_at": "2026-08-23T10:15:00Z"
  },
  "approvals": {
    "required_count": 2,
    "entries": [
      {
        "subject_id": "user:alice",
        "approved_at": "2026-08-23T10:01:00Z",
        "assurance": "mfa",
        "evidence_ref": "approval:alice"
      },
      {
        "subject_id": "user:bob",
        "approved_at": "2026-08-23T10:02:00Z",
        "assurance": "mfa",
        "evidence_ref": "approval:bob"
      }
    ]
  },
  "decision": {
    "id": "decision:contract-example",
    "request_id": "check:secrets-engine-destroy-example",
    "effect": "allow",
    "reason": "destruction_approved",
    "matched_policy_version": "v1",
    "matched_rule": "allow_destroy",
    "resource": {
      "id": "catalog:example-build-test-token",
      "type": "secret-catalog-lane",
      "system": "secrets-engine",
      "attributes": {
        "stage": "build",
        "fields": ["token"],
        "policy_targets": [],
        "auth_targets": []
      }
    },
    "subject": {
      "id": "user:alice",
      "type": "Human"
    },
    "binding": {
      "subject": {
        "id": "user:alice",
        "type": "Human"
      },
      "action": "destroy",
      "resource": {
        "id": "catalog:example-build-test-token",
        "type": "secret-catalog-lane",
        "system": "secrets-engine",
        "attributes": {
          "stage": "build",
          "fields": ["token"],
          "policy_targets": [],
          "auth_targets": []
        }
      },
      "context": {
        "purpose": "contract-test"
      },
      "request_digest": "sha256:73d5d7d5b3363f1a1db8f4c0e79c8f33dae5d77ffb97f21e449438bc0defa4c3"
    },
    "provenance": {
      "evaluator": "flex-auth/local",
      "mode": "standalone",
      "policy_package": "secrets-engine.lifecycle",
      "policy_version": "v1",
      "decision_time": "2026-08-23T10:00:30Z"
    }
  },
  "provenance": {
    "authority": "state-hub"
  }
}