pyhall-examples-python/workers/hello_worker/rules.json at main · pyhall/pyhall-examples-python · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
{
  "rules": [
    {
      "rule_id": "rr_hello_dev_001",
      "match": {
        "capability_id": "cap.hello.greet",
        "env": {"in": ["dev", "stage"]}
      },
      "decision": {
        "candidate_workers_ranked": [
          {"worker_species_id": "wrk.hello.greeter", "score_hint": 1.0}
        ],
        "required_controls_suggested": ["ctrl.obs.audit-log-append-only"],
        "escalation": {"policy_gate": false, "human_required_default": false},
        "preconditions": {}
      }
    },
    {
      "rule_id": "rr_hello_prod_001",
      "match": {
        "capability_id": "cap.hello.greet",
        "env": "prod",
        "data_label": {"in": ["PUBLIC", "INTERNAL"]}
      },
      "decision": {
        "candidate_workers_ranked": [
          {"worker_species_id": "wrk.hello.greeter", "score_hint": 1.0}
        ],
        "required_controls_suggested": [
          "ctrl.obs.audit-log-append-only",
          "ctrl.blast_radius_scoring"
        ],
        "escalation": {"policy_gate": true, "human_required_default": false},
        "preconditions": {}
      }
    }
  ]
}