informed-decision/docs/evidence/2026-10-05-lifecycle-discovery/policy-validation.json
tegwick 9207a5134f Prepare matching service and policy pins for review discovery
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
2026-10-05 01:05:54 +02:00

248 lines
5.4 KiB
JSON

{
"valid": true,
"caring_findings": [
{
"code": "CARING-POLICY-MISSING-DIMENSION",
"severity": "warning",
"message": "policy package should declare governed canonical roles",
"fields": [
"caring.canonical_roles"
]
},
{
"code": "CARING-POLICY-MISSING-DIMENSION",
"severity": "warning",
"message": "policy package should declare governed organization relations",
"fields": [
"caring.organization_relations"
]
},
{
"code": "CARING-POLICY-MISSING-DIMENSION",
"severity": "warning",
"message": "policy package should declare governed scopes",
"fields": [
"caring.scopes"
]
},
{
"code": "CARING-POLICY-MISSING-DIMENSION",
"severity": "warning",
"message": "policy package should declare governed planes",
"fields": [
"caring.planes"
]
},
{
"code": "CARING-POLICY-MISSING-DIMENSION",
"severity": "warning",
"message": "policy package should declare governed capabilities",
"fields": [
"caring.capabilities"
]
},
{
"code": "CARING-POLICY-MISSING-DIMENSION",
"severity": "warning",
"message": "policy package should declare governed exposure modes",
"fields": [
"caring.exposure_modes"
]
},
{
"code": "CARING-POLICY-MISSING-DIMENSION",
"severity": "warning",
"message": "policy package should declare governed conditions",
"fields": [
"caring.conditions"
]
},
{
"code": "CARING-POLICY-MISSING-DIMENSION",
"severity": "warning",
"message": "policy package should declare governed restrictions",
"fields": [
"caring.restrictions"
]
}
],
"tests": [
{
"name": "test_allow_does_not_prove_the_pin",
"passed": true
},
{
"name": "test_approval_id_malformed",
"passed": true
},
{
"name": "test_attribute_acts_are_eligible_only_when_sets_admit",
"passed": true
},
{
"name": "test_bad_memo_id_refused",
"passed": true
},
{
"name": "test_digest_mismatch",
"passed": true
},
{
"name": "test_exact_pin_mismatch_is_not_rescued",
"passed": true
},
{
"name": "test_exact_record_ignores_attribute_context",
"passed": true
},
{
"name": "test_future_mfa_is_identity_refused",
"passed": true
},
{
"name": "test_human_control_false",
"passed": true
},
{
"name": "test_initial_release_allows_only_decision_record_class",
"passed": true
},
{
"name": "test_initial_release_sets",
"passed": true
},
{
"name": "test_list_admits_recipient_with_twelve_hour_mfa",
"passed": true
},
{
"name": "test_list_does_not_relax_read_or_accept",
"passed": true
},
{
"name": "test_list_refuses_other_recipient",
"passed": true
},
{
"name": "test_list_requires_explicit_recipient",
"passed": true
},
{
"name": "test_list_retains_approval_and_group_guards",
"passed": true
},
{
"name": "test_listable_is_exact_union",
"passed": true
},
{
"name": "test_memo_review_group_is_not_hardcoded",
"passed": true
},
{
"name": "test_memo_version_refused",
"passed": true
},
{
"name": "test_requester_mismatch",
"passed": true
},
{
"name": "test_review_group_must_be_verified",
"passed": true
},
{
"name": "test_service_subject_is_identity_refused",
"passed": true
},
{
"name": "test_six_exact_metered_memos_allow_human_review",
"passed": true
},
{
"name": "test_stale_mfa_on_attribute_branch",
"passed": true
},
{
"name": "test_t03_records_not_in_act_scope",
"passed": true
},
{
"name": "test_tool_proof_exact_record_allowed",
"passed": true
},
{
"name": "test_tool_proof_without_mfa_denied",
"passed": true
},
{
"name": "test_tool_proof_wrong_digest_denied",
"passed": true
},
{
"name": "test_tool_proof_wrong_native_id_denied",
"passed": true
},
{
"name": "test_unknown_class",
"passed": true
},
{
"name": "test_unknown_request_denied",
"passed": true
},
{
"name": "test_unknown_submitter",
"passed": true
}
],
"fixtures": [
{
"id": "unknown-request-denied",
"passed": true,
"expected": {
"effect": "deny"
},
"actual": {
"effect": "deny",
"reason": "compact_sitting_scope_or_identity_refused"
}
},
{
"id": "attribute-non-human-refused",
"passed": true,
"expected": {
"effect": "deny",
"reason": "identity_refused"
},
"actual": {
"effect": "deny",
"reason": "identity_refused"
}
},
{
"id": "attribute-stale-mfa",
"passed": true,
"expected": {
"effect": "deny",
"reason": "stale_mfa"
},
"actual": {
"effect": "deny",
"reason": "stale_mfa"
}
},
{
"id": "attribute-future-mfa",
"passed": true,
"expected": {
"effect": "deny",
"reason": "identity_refused"
},
"actual": {
"effect": "deny",
"reason": "identity_refused"
}
}
]
}