tegwick
11453682cf
CI image 8007ede@sha256:6da9543d02ff556d5d5e33624599eb26b73ef365ed0e1ee2fac2ad7703b7dcba now serves examples/informed-decision-sitting. T03 deployment is unchanged. Native caller checks pass with synthetic identities; human bind stays with INFD-WP-0002. Assistant: grok Assistant-Session: 01a0a6cb-0334-72c0-83b0-2df57474a0f6
62 lines
2.3 KiB
JSON
62 lines
2.3 KiB
JSON
{
|
|
"scope": "native caller and policy with synthetic subject claims; not real human approval; T03 deployment unchanged",
|
|
"image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:6da9543d02ff556d5d5e33624599eb26b73ef365ed0e1ee2fac2ad7703b7dcba",
|
|
"caller": "system:serviceaccount:informed-decision:review",
|
|
"service": "flex-auth-informed-decision-sitting.flex-auth.svc.cluster.local:8080",
|
|
"checks": [
|
|
{
|
|
"case": "admitted-group-c02-accept",
|
|
"http": 200,
|
|
"effect": "allow",
|
|
"reason": "operator_admitted_compact_sitting",
|
|
"policy_package": "informed-decision.compact-sitting",
|
|
"policy_package_digest": "sha256:e0afd52e046616a93142f4064704b1cee6496801d94612fce29a958cf04eb41a",
|
|
"ok": true
|
|
},
|
|
{
|
|
"case": "unrelated-group-c02-accept",
|
|
"http": 200,
|
|
"effect": "deny",
|
|
"reason": "compact_sitting_scope_or_identity_refused",
|
|
"policy_package": "informed-decision.compact-sitting",
|
|
"policy_package_digest": "sha256:e0afd52e046616a93142f4064704b1cee6496801d94612fce29a958cf04eb41a",
|
|
"ok": true
|
|
},
|
|
{
|
|
"case": "omitted-c01-accept",
|
|
"http": 200,
|
|
"effect": "deny",
|
|
"reason": "compact_sitting_scope_or_identity_refused",
|
|
"policy_package": "informed-decision.compact-sitting",
|
|
"policy_package_digest": "sha256:e0afd52e046616a93142f4064704b1cee6496801d94612fce29a958cf04eb41a",
|
|
"ok": true
|
|
},
|
|
{
|
|
"case": "t03-memo-accept",
|
|
"http": 200,
|
|
"effect": "deny",
|
|
"reason": "compact_sitting_scope_or_identity_refused",
|
|
"policy_package": "informed-decision.compact-sitting",
|
|
"policy_package_digest": "sha256:e0afd52e046616a93142f4064704b1cee6496801d94612fce29a958cf04eb41a",
|
|
"ok": true
|
|
},
|
|
{
|
|
"case": "consume-c02",
|
|
"http": 200,
|
|
"effect": "deny",
|
|
"reason": "compact_sitting_scope_or_identity_refused",
|
|
"policy_package": "informed-decision.compact-sitting",
|
|
"policy_package_digest": "sha256:e0afd52e046616a93142f4064704b1cee6496801d94612fce29a958cf04eb41a",
|
|
"ok": true
|
|
},
|
|
{
|
|
"case": "missing-token",
|
|
"http": 401,
|
|
"effect": null,
|
|
"reason": "unauthenticated\n",
|
|
"policy_package": null,
|
|
"policy_package_digest": null,
|
|
"ok": true
|
|
}
|
|
]
|
|
}
|