zone-engine/fixtures/exceptions/invalid-overlap.yaml
tegwick be29c28100 feat: harden zone reference contracts
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0291a-1e87-7151-9934-fcbfe3f65eb1
2026-08-23 12:27:13 +02:00

30 lines
1.1 KiB
YAML

standard: security-zone-exceptions_v0.1
exceptions:
- exception_id: zone-exc-fixture-001
security_zone: z2-protected
control: flex-auth/pre-sign
workloads: [issue-core]
base: {stance: enforced, failure_mode: fail_closed}
relaxation: {stance: advisory}
justification: first overlapping fixture
requested_by: issue-core
granted_by: ops-warden/security-owner
issued_at: "2026-08-23T09:00:00Z"
not_before: "2026-08-23T10:00:00Z"
not_after: "2026-08-23T12:00:00Z"
maximum_duration_policy: ops-warden/security-zone-exceptions@1
change_ref: ops-warden@fixture-1
- exception_id: zone-exc-fixture-002
security_zone: z2-protected
control: flex-auth/pre-sign
workloads: [issue-core]
base: {stance: enforced, failure_mode: fail_closed}
relaxation: {stance: advisory}
justification: second overlapping fixture
requested_by: issue-core
granted_by: ops-warden/security-owner
issued_at: "2026-08-23T09:30:00Z"
not_before: "2026-08-23T11:00:00Z"
not_after: "2026-08-23T12:30:00Z"
maximum_duration_policy: ops-warden/security-zone-exceptions@1
change_ref: ops-warden@fixture-2