{
  "image": "REQUIRED: forgejo.coulomb.social/coulomb/informed-decision@sha256:<published manifest digest>",
  "policy": {
    "origin": "REQUIRED: http://<admitted service>.flex-auth.svc.cluster.local:8080",
    "package": "REQUIRED: owner-admitted package",
    "version": "REQUIRED: owner-admitted version",
    "package_digest": "REQUIRED: sha256:<native package digest>",
    "pod_name": "REQUIRED: exact app.kubernetes.io/name label of admitted PDP"
  },
  "keycape_egress_ips": ["REQUIRED: observed and admitted public issuer IPv4/IPv6 address"],
  "storage_class": "REQUIRED: admitted local-filesystem ReadWriteOnce storage class"
}