flex-auth/examples/markitect/subject_manifest.yaml
tegwick c074237aac Make undeclared policy attribute reads a validate error.
FLEX-WP-0025-T03: flex-auth validate flags input.*.attributes keys that
no sibling registry or manifest supplies. A broken testdata package
proves tests can pass while the ceiling remains caller-only.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
2026-09-14 09:54:09 +02:00

24 lines
544 B
YAML

id: subjects:markitect-example
subjects:
- id: user:visitor
type: Human
display_name: Visitor
organization_relation: Customer
roles: []
groups: []
tenant: tenant:alpha
- id: user:steward
type: Human
display_name: Steward
organization_relation: ServiceProvider
roles:
- Operator
groups:
- group:platform-architecture
tenant: tenant:alpha
groups:
- id: group:platform-architecture
display_name: Platform Architecture
members:
- user:steward
tenant: tenant:alpha