flex-auth/docs/evidence/2026-09-14-t03-native-review-policy.json
tegwick e62c0cfc36
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 3s
Build and Publish Container Image / build-and-push (push) Successful in 1m1s
Admit exact T03 human review mandate with caller-bound policy
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
2026-09-14 02:47:31 +02:00

47 lines
1.7 KiB
JSON

{
"scope": "native caller and policy with synthetic subject claims; not real human approval",
"checks": [
{
"action": "apply",
"case": "admitted-group",
"effect": "allow",
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
"caller": "system:serviceaccount:informed-decision:review"
},
{
"action": "apply",
"case": "unrelated-group",
"effect": "deny",
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
"caller": "system:serviceaccount:informed-decision:review"
},
{
"action": "verify",
"case": "admitted-group",
"effect": "allow",
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
"caller": "system:serviceaccount:informed-decision:review"
},
{
"action": "verify",
"case": "unrelated-group",
"effect": "deny",
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
"caller": "system:serviceaccount:informed-decision:review"
},
{
"action": "exec",
"case": "admitted-group",
"effect": "allow",
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
"caller": "system:serviceaccount:informed-decision:review"
},
{
"action": "exec",
"case": "unrelated-group",
"effect": "deny",
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
"caller": "system:serviceaccount:informed-decision:review"
}
]
}