standard: security-zone-control-profile_v0.1
profile_id: netkingdom-build-v0.1
version: flex-auth@e521e7b+ops-warden@7ce58ae
controls:
  flex-auth/pre-sign:
    policy_owner: flex-auth
    pep_owner: ops-warden
    policy_ref: flex-auth@e521e7b:examples/ops-warden/policy_package.md
    zones:
      z0-experimental: {stance: advisory, failure_mode: fail_open}
      z1-operational: {stance: advisory, failure_mode: fail_open}
      z2-protected: {stance: enforced, failure_mode: fail_open}
      z2-continuity: {stance: enforced, failure_mode: fail_open}
      z3-critical: {stance: enforced, failure_mode: fail_closed}
      unknown: {stance: advisory, failure_mode: fail_open}
  ops-warden/agent-high-risk-read:
    policy_owner: ops-warden
    pep_owner: ops-warden
    policy_ref: ops-warden@7ce58ae:src/warden/routing/models.py
    zones:
      z0-experimental: {stance: enforced, failure_mode: fail_closed}
      z1-operational: {stance: enforced, failure_mode: fail_closed}
      z2-protected: {stance: enforced, failure_mode: fail_closed}
      z2-continuity: {stance: enforced, failure_mode: fail_closed}
      z3-critical: {stance: enforced, failure_mode: fail_closed}
      unknown: {stance: enforced, failure_mode: fail_closed}
  ops-warden/plan-zone-rule:
    policy_owner: ops-warden
    pep_owner: ops-warden
    policy_ref: security-zones_v0.1@104d5c6:section-5.1
    zones:
      z0-experimental: {stance: advisory, failure_mode: fail_closed}
      z1-operational: {stance: advisory, failure_mode: fail_closed}
      z2-protected: {stance: enforced, failure_mode: fail_closed}
      z2-continuity: {stance: enforced, failure_mode: fail_closed}
      z3-critical: {stance: enforced, failure_mode: fail_closed}
      unknown: {stance: enforced, failure_mode: fail_closed}