{ "scope": "local actual evaluator with synthetic identity; no live human approvals; T03 package untouched", "checks": [ { "check": "c02:read", "effect": "allow" }, { "check": "c02:acknowledge", "effect": "allow" }, { "check": "c02:accept", "effect": "allow" }, { "check": "c02:return", "effect": "allow" }, { "check": "c02:discuss", "effect": "allow" }, { "check": "c02:decline", "effect": "allow" }, { "check": "c02:wrong-group", "effect": "deny" }, { "check": "c02:no-group", "effect": "deny" }, { "check": "c02:service", "effect": "deny" }, { "check": "c02:stale-mfa", "effect": "deny" }, { "check": "c02:future-mfa", "effect": "deny" }, { "check": "c02:no-mfa", "effect": "deny" }, { "check": "c02:forged-human-route", "effect": "deny" }, { "check": "c02:wrong-tenant", "effect": "deny" }, { "check": "c02:other-memo", "effect": "deny" }, { "check": "c02:omitted-c01", "effect": "deny" }, { "check": "c02:t03-memo", "effect": "deny" }, { "check": "c02:changed-version", "effect": "deny" }, { "check": "c02:changed-approval", "effect": "deny" }, { "check": "c02:changed-digest", "effect": "deny" }, { "check": "c02:consume", "effect": "deny" }, { "check": "c03:read", "effect": "allow" }, { "check": "c03:acknowledge", "effect": "allow" }, { "check": "c03:accept", "effect": "allow" }, { "check": "c03:return", "effect": "allow" }, { "check": "c03:discuss", "effect": "allow" }, { "check": "c03:decline", "effect": "allow" }, { "check": "c03:wrong-group", "effect": "deny" }, { "check": "c03:no-group", "effect": "deny" }, { "check": "c03:service", "effect": "deny" }, { "check": "c03:stale-mfa", "effect": "deny" }, { "check": "c03:future-mfa", "effect": "deny" }, { "check": "c03:no-mfa", "effect": "deny" }, { "check": "c03:forged-human-route", "effect": "deny" }, { "check": "c03:wrong-tenant", "effect": "deny" }, { "check": "c03:other-memo", "effect": "deny" }, { "check": "c03:omitted-c01", "effect": "deny" }, { "check": "c03:t03-memo", "effect": "deny" }, { "check": "c03:changed-version", "effect": "deny" }, { "check": "c03:changed-approval", "effect": "deny" }, { "check": "c03:changed-digest", "effect": "deny" }, { "check": "c03:consume", "effect": "deny" }, { "check": "c04:read", "effect": "allow" }, { "check": "c04:acknowledge", "effect": "allow" }, { "check": "c04:accept", "effect": "allow" }, { "check": "c04:return", "effect": "allow" }, { "check": "c04:discuss", "effect": "allow" }, { "check": "c04:decline", "effect": "allow" }, { "check": "c04:wrong-group", "effect": "deny" }, { "check": "c04:no-group", "effect": "deny" }, { "check": "c04:service", "effect": "deny" }, { "check": "c04:stale-mfa", "effect": "deny" }, { "check": "c04:future-mfa", "effect": "deny" }, { "check": "c04:no-mfa", "effect": "deny" }, { "check": "c04:forged-human-route", "effect": "deny" }, { "check": "c04:wrong-tenant", "effect": "deny" }, { "check": "c04:other-memo", "effect": "deny" }, { "check": "c04:omitted-c01", "effect": "deny" }, { "check": "c04:t03-memo", "effect": "deny" }, { "check": "c04:changed-version", "effect": "deny" }, { "check": "c04:changed-approval", "effect": "deny" }, { "check": "c04:changed-digest", "effect": "deny" }, { "check": "c04:consume", "effect": "deny" }, { "check": "d01:read", "effect": "allow" }, { "check": "d01:acknowledge", "effect": "allow" }, { "check": "d01:accept", "effect": "allow" }, { "check": "d01:return", "effect": "allow" }, { "check": "d01:discuss", "effect": "allow" }, { "check": "d01:decline", "effect": "allow" }, { "check": "d01:wrong-group", "effect": "deny" }, { "check": "d01:no-group", "effect": "deny" }, { "check": "d01:service", "effect": "deny" }, { "check": "d01:stale-mfa", "effect": "deny" }, { "check": "d01:future-mfa", "effect": "deny" }, { "check": "d01:no-mfa", "effect": "deny" }, { "check": "d01:forged-human-route", "effect": "deny" }, { "check": "d01:wrong-tenant", "effect": "deny" }, { "check": "d01:other-memo", "effect": "deny" }, { "check": "d01:omitted-c01", "effect": "deny" }, { "check": "d01:t03-memo", "effect": "deny" }, { "check": "d01:changed-version", "effect": "deny" }, { "check": "d01:changed-approval", "effect": "deny" }, { "check": "d01:changed-digest", "effect": "deny" }, { "check": "d01:consume", "effect": "deny" }, { "check": "d02:read", "effect": "allow" }, { "check": "d02:acknowledge", "effect": "allow" }, { "check": "d02:accept", "effect": "allow" }, { "check": "d02:return", "effect": "allow" }, { "check": "d02:discuss", "effect": "allow" }, { "check": "d02:decline", "effect": "allow" }, { "check": "d02:wrong-group", "effect": "deny" }, { "check": "d02:no-group", "effect": "deny" }, { "check": "d02:service", "effect": "deny" }, { "check": "d02:stale-mfa", "effect": "deny" }, { "check": "d02:future-mfa", "effect": "deny" }, { "check": "d02:no-mfa", "effect": "deny" }, { "check": "d02:forged-human-route", "effect": "deny" }, { "check": "d02:wrong-tenant", "effect": "deny" }, { "check": "d02:other-memo", "effect": "deny" }, { "check": "d02:omitted-c01", "effect": "deny" }, { "check": "d02:t03-memo", "effect": "deny" }, { "check": "d02:changed-version", "effect": "deny" }, { "check": "d02:changed-approval", "effect": "deny" }, { "check": "d02:changed-digest", "effect": "deny" }, { "check": "d02:consume", "effect": "deny" }, { "check": "d03:read", "effect": "allow" }, { "check": "d03:acknowledge", "effect": "allow" }, { "check": "d03:accept", "effect": "allow" }, { "check": "d03:return", "effect": "allow" }, { "check": "d03:discuss", "effect": "allow" }, { "check": "d03:decline", "effect": "allow" }, { "check": "d03:wrong-group", "effect": "deny" }, { "check": "d03:no-group", "effect": "deny" }, { "check": "d03:service", "effect": "deny" }, { "check": "d03:stale-mfa", "effect": "deny" }, { "check": "d03:future-mfa", "effect": "deny" }, { "check": "d03:no-mfa", "effect": "deny" }, { "check": "d03:forged-human-route", "effect": "deny" }, { "check": "d03:wrong-tenant", "effect": "deny" }, { "check": "d03:other-memo", "effect": "deny" }, { "check": "d03:omitted-c01", "effect": "deny" }, { "check": "d03:t03-memo", "effect": "deny" }, { "check": "d03:changed-version", "effect": "deny" }, { "check": "d03:changed-approval", "effect": "deny" }, { "check": "d03:changed-digest", "effect": "deny" }, { "check": "d03:consume", "effect": "deny" }, { "check": "d04:read", "effect": "allow" }, { "check": "d04:acknowledge", "effect": "allow" }, { "check": "d04:accept", "effect": "allow" }, { "check": "d04:return", "effect": "allow" }, { "check": "d04:discuss", "effect": "allow" }, { "check": "d04:decline", "effect": "allow" }, { "check": "d04:wrong-group", "effect": "deny" }, { "check": "d04:no-group", "effect": "deny" }, { "check": "d04:service", "effect": "deny" }, { "check": "d04:stale-mfa", "effect": "deny" }, { "check": "d04:future-mfa", "effect": "deny" }, { "check": "d04:no-mfa", "effect": "deny" }, { "check": "d04:forged-human-route", "effect": "deny" }, { "check": "d04:wrong-tenant", "effect": "deny" }, { "check": "d04:other-memo", "effect": "deny" }, { "check": "d04:omitted-c01", "effect": "deny" }, { "check": "d04:t03-memo", "effect": "deny" }, { "check": "d04:changed-version", "effect": "deny" }, { "check": "d04:changed-approval", "effect": "deny" }, { "check": "d04:changed-digest", "effect": "deny" }, { "check": "d04:consume", "effect": "deny" }, { "check": "b01:read", "effect": "allow" }, { "check": "b01:acknowledge", "effect": "allow" }, { "check": "b01:accept", "effect": "allow" }, { "check": "b01:return", "effect": "allow" }, { "check": "b01:discuss", "effect": "allow" }, { "check": "b01:decline", "effect": "allow" }, { "check": "b01:wrong-group", "effect": "deny" }, { "check": "b01:no-group", "effect": "deny" }, { "check": "b01:service", "effect": "deny" }, { "check": "b01:stale-mfa", "effect": "deny" }, { "check": "b01:future-mfa", "effect": "deny" }, { "check": "b01:no-mfa", "effect": "deny" }, { "check": "b01:forged-human-route", "effect": "deny" }, { "check": "b01:wrong-tenant", "effect": "deny" }, { "check": "b01:other-memo", "effect": "deny" }, { "check": "b01:omitted-c01", "effect": "deny" }, { "check": "b01:t03-memo", "effect": "deny" }, { "check": "b01:changed-version", "effect": "deny" }, { "check": "b01:changed-approval", "effect": "deny" }, { "check": "b01:changed-digest", "effect": "deny" }, { "check": "b01:consume", "effect": "deny" }, { "check": "list:c02:fresh", "effect": "allow" }, { "check": "list:c02:observed-1744s", "effect": "allow" }, { "check": "list:c02:inside-12h", "effect": "allow" }, { "check": "list:c02:past-12h", "effect": "deny" }, { "check": "list:c02:read-stale-refused", "effect": "deny" }, { "check": "list:c02:wrong-group", "effect": "deny" }, { "check": "list:c02:no-group", "effect": "deny" }, { "check": "list:c02:service", "effect": "deny" }, { "check": "list:c02:agent", "effect": "deny" }, { "check": "list:c02:future-mfa", "effect": "deny" }, { "check": "list:c02:no-mfa", "effect": "deny" }, { "check": "list:c02:aal1", "effect": "deny" }, { "check": "list:c02:forged-human-route", "effect": "deny" }, { "check": "list:c02:indeterminate-route", "effect": "deny" }, { "check": "list:c02:wrong-tenant", "effect": "deny" }, { "check": "list:c02:other-memo", "effect": "deny" }, { "check": "list:c02:omitted-c01", "effect": "deny" }, { "check": "list:c02:other-system", "effect": "deny" }, { "check": "list:c02:changed-version", "effect": "deny" }, { "check": "list:c02:changed-approval", "effect": "deny" }, { "check": "list:c02:changed-digest", "effect": "deny" }, { "check": "list:c03:fresh", "effect": "allow" }, { "check": "list:c03:observed-1744s", "effect": "allow" }, { "check": "list:c03:inside-12h", "effect": "allow" }, { "check": "list:c03:past-12h", "effect": "deny" }, { "check": "list:c03:read-stale-refused", "effect": "deny" }, { "check": "list:c03:wrong-group", "effect": "deny" }, { "check": "list:c03:no-group", "effect": "deny" }, { "check": "list:c03:service", "effect": "deny" }, { "check": "list:c03:agent", "effect": "deny" }, { "check": "list:c03:future-mfa", "effect": "deny" }, { "check": "list:c03:no-mfa", "effect": "deny" }, { "check": "list:c03:aal1", "effect": "deny" }, { "check": "list:c03:forged-human-route", "effect": "deny" }, { "check": "list:c03:indeterminate-route", "effect": "deny" }, { "check": "list:c03:wrong-tenant", "effect": "deny" }, { "check": "list:c03:other-memo", "effect": "deny" }, { "check": "list:c03:omitted-c01", "effect": "deny" }, { "check": "list:c03:other-system", "effect": "deny" }, { "check": "list:c03:changed-version", "effect": "deny" }, { "check": "list:c03:changed-approval", "effect": "deny" }, { "check": "list:c03:changed-digest", "effect": "deny" }, { "check": "list:c04:fresh", "effect": "allow" }, { "check": "list:c04:observed-1744s", "effect": "allow" }, { "check": "list:c04:inside-12h", "effect": "allow" }, { "check": "list:c04:past-12h", "effect": "deny" }, { "check": "list:c04:read-stale-refused", "effect": "deny" }, { "check": "list:c04:wrong-group", "effect": "deny" }, { "check": "list:c04:no-group", "effect": "deny" }, { "check": "list:c04:service", "effect": "deny" }, { "check": "list:c04:agent", "effect": "deny" }, { "check": "list:c04:future-mfa", "effect": "deny" }, { "check": "list:c04:no-mfa", "effect": "deny" }, { "check": "list:c04:aal1", "effect": "deny" }, { "check": "list:c04:forged-human-route", "effect": "deny" }, { "check": "list:c04:indeterminate-route", "effect": "deny" }, { "check": "list:c04:wrong-tenant", "effect": "deny" }, { "check": "list:c04:other-memo", "effect": "deny" }, { "check": "list:c04:omitted-c01", "effect": "deny" }, { "check": "list:c04:other-system", "effect": "deny" }, { "check": "list:c04:changed-version", "effect": "deny" }, { "check": "list:c04:changed-approval", "effect": "deny" }, { "check": "list:c04:changed-digest", "effect": "deny" }, { "check": "list:d01:fresh", "effect": "allow" }, { "check": "list:d01:observed-1744s", "effect": "allow" }, { "check": "list:d01:inside-12h", "effect": "allow" }, { "check": "list:d01:past-12h", "effect": "deny" }, { "check": "list:d01:read-stale-refused", "effect": "deny" }, { "check": "list:d01:wrong-group", "effect": "deny" }, { "check": "list:d01:no-group", "effect": "deny" }, { "check": "list:d01:service", "effect": "deny" }, { "check": "list:d01:agent", "effect": "deny" }, { "check": "list:d01:future-mfa", "effect": "deny" }, { "check": "list:d01:no-mfa", "effect": "deny" }, { "check": "list:d01:aal1", "effect": "deny" }, { "check": "list:d01:forged-human-route", "effect": "deny" }, { "check": "list:d01:indeterminate-route", "effect": "deny" }, { "check": "list:d01:wrong-tenant", "effect": "deny" }, { "check": "list:d01:other-memo", "effect": "deny" }, { "check": "list:d01:omitted-c01", "effect": "deny" }, { "check": "list:d01:other-system", "effect": "deny" }, { "check": "list:d01:changed-version", "effect": "deny" }, { "check": "list:d01:changed-approval", "effect": "deny" }, { "check": "list:d01:changed-digest", "effect": "deny" }, { "check": "list:d02:fresh", "effect": "allow" }, { "check": "list:d02:observed-1744s", "effect": "allow" }, { "check": "list:d02:inside-12h", "effect": "allow" }, { "check": "list:d02:past-12h", "effect": "deny" }, { "check": "list:d02:read-stale-refused", "effect": "deny" }, { "check": "list:d02:wrong-group", "effect": "deny" }, { "check": "list:d02:no-group", "effect": "deny" }, { "check": "list:d02:service", "effect": "deny" }, { "check": "list:d02:agent", "effect": "deny" }, { "check": "list:d02:future-mfa", "effect": "deny" }, { "check": "list:d02:no-mfa", "effect": "deny" }, { "check": "list:d02:aal1", "effect": "deny" }, { "check": "list:d02:forged-human-route", "effect": "deny" }, { "check": "list:d02:indeterminate-route", "effect": "deny" }, { "check": "list:d02:wrong-tenant", "effect": "deny" }, { "check": "list:d02:other-memo", "effect": "deny" }, { "check": "list:d02:omitted-c01", "effect": "deny" }, { "check": "list:d02:other-system", "effect": "deny" }, { "check": "list:d02:changed-version", "effect": "deny" }, { "check": "list:d02:changed-approval", "effect": "deny" }, { "check": "list:d02:changed-digest", "effect": "deny" }, { "check": "list:d03:fresh", "effect": "allow" }, { "check": "list:d03:observed-1744s", "effect": "allow" }, { "check": "list:d03:inside-12h", "effect": "allow" }, { "check": "list:d03:past-12h", "effect": "deny" }, { "check": "list:d03:read-stale-refused", "effect": "deny" }, { "check": "list:d03:wrong-group", "effect": "deny" }, { "check": "list:d03:no-group", "effect": "deny" }, { "check": "list:d03:service", "effect": "deny" }, { "check": "list:d03:agent", "effect": "deny" }, { "check": "list:d03:future-mfa", "effect": "deny" }, { "check": "list:d03:no-mfa", "effect": "deny" }, { "check": "list:d03:aal1", "effect": "deny" }, { "check": "list:d03:forged-human-route", "effect": "deny" }, { "check": "list:d03:indeterminate-route", "effect": "deny" }, { "check": "list:d03:wrong-tenant", "effect": "deny" }, { "check": "list:d03:other-memo", "effect": "deny" }, { "check": "list:d03:omitted-c01", "effect": "deny" }, { "check": "list:d03:other-system", "effect": "deny" }, { "check": "list:d03:changed-version", "effect": "deny" }, { "check": "list:d03:changed-approval", "effect": "deny" }, { "check": "list:d03:changed-digest", "effect": "deny" }, { "check": "list:d04:fresh", "effect": "allow" }, { "check": "list:d04:observed-1744s", "effect": "allow" }, { "check": "list:d04:inside-12h", "effect": "allow" }, { "check": "list:d04:past-12h", "effect": "deny" }, { "check": "list:d04:read-stale-refused", "effect": "deny" }, { "check": "list:d04:wrong-group", "effect": "deny" }, { "check": "list:d04:no-group", "effect": "deny" }, { "check": "list:d04:service", "effect": "deny" }, { "check": "list:d04:agent", "effect": "deny" }, { "check": "list:d04:future-mfa", "effect": "deny" }, { "check": "list:d04:no-mfa", "effect": "deny" }, { "check": "list:d04:aal1", "effect": "deny" }, { "check": "list:d04:forged-human-route", "effect": "deny" }, { "check": "list:d04:indeterminate-route", "effect": "deny" }, { "check": "list:d04:wrong-tenant", "effect": "deny" }, { "check": "list:d04:other-memo", "effect": "deny" }, { "check": "list:d04:omitted-c01", "effect": "deny" }, { "check": "list:d04:other-system", "effect": "deny" }, { "check": "list:d04:changed-version", "effect": "deny" }, { "check": "list:d04:changed-approval", "effect": "deny" }, { "check": "list:d04:changed-digest", "effect": "deny" }, { "check": "list:b01:fresh", "effect": "allow" }, { "check": "list:b01:observed-1744s", "effect": "allow" }, { "check": "list:b01:inside-12h", "effect": "allow" }, { "check": "list:b01:past-12h", "effect": "deny" }, { "check": "list:b01:read-stale-refused", "effect": "deny" }, { "check": "list:b01:wrong-group", "effect": "deny" }, { "check": "list:b01:no-group", "effect": "deny" }, { "check": "list:b01:service", "effect": "deny" }, { "check": "list:b01:agent", "effect": "deny" }, { "check": "list:b01:future-mfa", "effect": "deny" }, { "check": "list:b01:no-mfa", "effect": "deny" }, { "check": "list:b01:aal1", "effect": "deny" }, { "check": "list:b01:forged-human-route", "effect": "deny" }, { "check": "list:b01:indeterminate-route", "effect": "deny" }, { "check": "list:b01:wrong-tenant", "effect": "deny" }, { "check": "list:b01:other-memo", "effect": "deny" }, { "check": "list:b01:omitted-c01", "effect": "deny" }, { "check": "list:b01:other-system", "effect": "deny" }, { "check": "list:b01:changed-version", "effect": "deny" }, { "check": "list:b01:changed-approval", "effect": "deny" }, { "check": "list:b01:changed-digest", "effect": "deny" }, { "check": "list:t03-apply:fresh", "effect": "allow" }, { "check": "list:t03-apply:observed-1744s", "effect": "allow" }, { "check": "list:t03-apply:inside-12h", "effect": "allow" }, { "check": "list:t03-apply:past-12h", "effect": "deny" }, { "check": "list:t03-apply:read-stale-refused", "effect": "deny" }, { "check": "list:t03-apply:act-read-not-widened", "effect": "deny" }, { "check": "list:t03-apply:act-acknowledge-not-widened", "effect": "deny" }, { "check": "list:t03-apply:act-accept-not-widened", "effect": "deny" }, { "check": "list:t03-apply:act-return-not-widened", "effect": "deny" }, { "check": "list:t03-apply:act-discuss-not-widened", "effect": "deny" }, { "check": "list:t03-apply:act-decline-not-widened", "effect": "deny" }, { "check": "list:t03-apply:wrong-group", "effect": "deny" }, { "check": "list:t03-apply:no-group", "effect": "deny" }, { "check": "list:t03-apply:service", "effect": "deny" }, { "check": "list:t03-apply:agent", "effect": "deny" }, { "check": "list:t03-apply:future-mfa", "effect": "deny" }, { "check": "list:t03-apply:no-mfa", "effect": "deny" }, { "check": "list:t03-apply:aal1", "effect": "deny" }, { "check": "list:t03-apply:forged-human-route", "effect": "deny" }, { "check": "list:t03-apply:indeterminate-route", "effect": "deny" }, { "check": "list:t03-apply:wrong-tenant", "effect": "deny" }, { "check": "list:t03-apply:other-memo", "effect": "deny" }, { "check": "list:t03-apply:omitted-c01", "effect": "deny" }, { "check": "list:t03-apply:other-system", "effect": "deny" }, { "check": "list:t03-apply:changed-version", "effect": "deny" }, { "check": "list:t03-apply:changed-approval", "effect": "deny" }, { "check": "list:t03-apply:changed-digest", "effect": "deny" }, { "check": "list:t03-verify:fresh", "effect": "allow" }, { "check": "list:t03-verify:observed-1744s", "effect": "allow" }, { "check": "list:t03-verify:inside-12h", "effect": "allow" }, { "check": "list:t03-verify:past-12h", "effect": "deny" }, { "check": "list:t03-verify:read-stale-refused", "effect": "deny" }, { "check": "list:t03-verify:act-read-not-widened", "effect": "deny" }, { "check": "list:t03-verify:act-acknowledge-not-widened", "effect": "deny" }, { "check": "list:t03-verify:act-accept-not-widened", "effect": "deny" }, { "check": "list:t03-verify:act-return-not-widened", "effect": "deny" }, { "check": "list:t03-verify:act-discuss-not-widened", "effect": "deny" }, { "check": "list:t03-verify:act-decline-not-widened", "effect": "deny" }, { "check": "list:t03-verify:wrong-group", "effect": "deny" }, { "check": "list:t03-verify:no-group", "effect": "deny" }, { "check": "list:t03-verify:service", "effect": "deny" }, { "check": "list:t03-verify:agent", "effect": "deny" }, { "check": "list:t03-verify:future-mfa", "effect": "deny" }, { "check": "list:t03-verify:no-mfa", "effect": "deny" }, { "check": "list:t03-verify:aal1", "effect": "deny" }, { "check": "list:t03-verify:forged-human-route", "effect": "deny" }, { "check": "list:t03-verify:indeterminate-route", "effect": "deny" }, { "check": "list:t03-verify:wrong-tenant", "effect": "deny" }, { "check": "list:t03-verify:other-memo", "effect": "deny" }, { "check": "list:t03-verify:omitted-c01", "effect": "deny" }, { "check": "list:t03-verify:other-system", "effect": "deny" }, { "check": "list:t03-verify:changed-version", "effect": "deny" }, { "check": "list:t03-verify:changed-approval", "effect": "deny" }, { "check": "list:t03-verify:changed-digest", "effect": "deny" }, { "check": "list:t03-exec:fresh", "effect": "allow" }, { "check": "list:t03-exec:observed-1744s", "effect": "allow" }, { "check": "list:t03-exec:inside-12h", "effect": "allow" }, { "check": "list:t03-exec:past-12h", "effect": "deny" }, { "check": "list:t03-exec:read-stale-refused", "effect": "deny" }, { "check": "list:t03-exec:act-read-not-widened", "effect": "deny" }, { "check": "list:t03-exec:act-acknowledge-not-widened", "effect": "deny" }, { "check": "list:t03-exec:act-accept-not-widened", "effect": "deny" }, { "check": "list:t03-exec:act-return-not-widened", "effect": "deny" }, { "check": "list:t03-exec:act-discuss-not-widened", "effect": "deny" }, { "check": "list:t03-exec:act-decline-not-widened", "effect": "deny" }, { "check": "list:t03-exec:wrong-group", "effect": "deny" }, { "check": "list:t03-exec:no-group", "effect": "deny" }, { "check": "list:t03-exec:service", "effect": "deny" }, { "check": "list:t03-exec:agent", "effect": "deny" }, { "check": "list:t03-exec:future-mfa", "effect": "deny" }, { "check": "list:t03-exec:no-mfa", "effect": "deny" }, { "check": "list:t03-exec:aal1", "effect": "deny" }, { "check": "list:t03-exec:forged-human-route", "effect": "deny" }, { "check": "list:t03-exec:indeterminate-route", "effect": "deny" }, { "check": "list:t03-exec:wrong-tenant", "effect": "deny" }, { "check": "list:t03-exec:other-memo", "effect": "deny" }, { "check": "list:t03-exec:omitted-c01", "effect": "deny" }, { "check": "list:t03-exec:other-system", "effect": "deny" }, { "check": "list:t03-exec:changed-version", "effect": "deny" }, { "check": "list:t03-exec:changed-approval", "effect": "deny" }, { "check": "list:t03-exec:changed-digest", "effect": "deny" } ] }