[ { "id": "fixture:qonto-assistant-agent-read-allow", "request": { "id": "check:qonto-assistant-read-t1", "tenant": "tenant:friendly:binky", "subject": {"id": "agent-harness-binky", "type": "agent"}, "action": "finance.qonto.read", "resource": {"id": "finance-snapshot", "type": "finance-snapshot", "system": "qonto-assistant"}, "context": {} }, "expect": {"effect": "allow", "reason": "finance_read_policy_matched"} }, { "id": "fixture:qonto-assistant-human-read-allow", "request": { "id": "check:qonto-assistant-read-t2", "tenant": "tenant:friendly:binky", "subject": {"id": "bernd.worsch", "type": "human"}, "action": "finance.qonto.read", "resource": {"id": "finance-snapshot", "type": "finance-snapshot", "system": "qonto-assistant"}, "context": {} }, "expect": {"effect": "allow", "reason": "finance_read_policy_matched"} }, { "id": "fixture:qonto-assistant-wrong-system-deny", "request": { "id": "check:qonto-assistant-read-t3", "tenant": "tenant:friendly:binky", "subject": {"id": "agent-harness-binky", "type": "agent"}, "action": "finance.qonto.read", "resource": {"id": "x", "type": "finance-snapshot", "system": "some-other-system"}, "context": {} }, "expect": {"effect": "deny", "reason": "wrong_system"} }, { "id": "fixture:qonto-assistant-unknown-action-deny", "request": { "id": "check:qonto-assistant-read-t4", "tenant": "tenant:friendly:binky", "subject": {"id": "agent-harness-binky", "type": "agent"}, "action": "finance.qonto.transfer", "resource": {"id": "finance-snapshot", "type": "finance-snapshot", "system": "qonto-assistant"}, "context": {} }, "expect": {"effect": "deny", "reason": "unknown_action"} }, { "id": "fixture:qonto-assistant-wrong-subject-type-deny", "request": { "id": "check:qonto-assistant-read-t5", "tenant": "tenant:friendly:binky", "subject": {"id": "unknown-device", "type": "device"}, "action": "finance.qonto.read", "resource": {"id": "finance-snapshot", "type": "finance-snapshot", "system": "qonto-assistant"}, "context": {} }, "expect": {"effect": "deny", "reason": "wrong_subject_type"} }, { "id": "fixture:qonto-assistant-wrong-tenant-deny", "request": { "id": "check:qonto-assistant-read-t6", "tenant": "tenant:friendly:some-other-company", "subject": {"id": "agent-harness-binky", "type": "agent"}, "action": "finance.qonto.read", "resource": {"id": "finance-snapshot", "type": "finance-snapshot", "system": "qonto-assistant"}, "context": {} }, "expect": {"effect": "deny", "reason": "wrong_tenant"} } ]