tegwick
0e020b2d8c
FLEX-WP-0022-T03: the rules already refused a foreign tenant; the fixture suites never varied the field. No policy or version change. Asked tenant-engine to name the CheckRequest tenant relation for T01/T02. Assistant: grok Assistant-Session: 01a0a6cb-0334-72c0-83b0-2df57474a0f6
21 lines
559 B
JSON
21 lines
559 B
JSON
{
|
|
"id": "check:credential-grant-wrong-tenant-http-shape",
|
|
"tenant": "tenant:other",
|
|
"subject": {
|
|
"id": "agent:codex/railiance-platform",
|
|
"type": "Agent"
|
|
},
|
|
"action": "issue",
|
|
"resource": {
|
|
"id": "credential-grant:rapp-postgres/audit-core-runtime",
|
|
"type": "credential-grant",
|
|
"system": "railiance-platform"
|
|
},
|
|
"context": {
|
|
"actor_type": "approved-agent",
|
|
"bound_subject": "agent:codex/railiance-platform",
|
|
"purpose": "audit-core-runtime",
|
|
"delivery_mode": "exec-env",
|
|
"requested_ttl_seconds": 900
|
|
}
|
|
}
|