{
  "id": "check:tenant-engine-guardrail-read-pdp",
  "tenant": "tenant:friendly:binky",
  "subject": {
    "id": "flex-auth",
    "type": "service"
  },
  "action": "tenant.guardrail.read",
  "resource": {
    "id": "t-1",
    "type": "guardrail",
    "system": "tenant-engine"
  },
  "context": {}
}