@armoriq/policy-ir 0.1.0

package/dist/vectors.js

@@ -0,0 +1,942 @@
+// vectors/canonical.json
+var canonical_default = [
+  {
+    name: "empty object",
+    input: {},
+    canonical: "{}"
+  },
+  {
+    name: "keys sorted bytewise",
+    input: {
+      "9": 6,
+      "10": 5,
+      b: 1,
+      a: 2,
+      B: 3,
+      _: 4
+    },
+    canonical: '{"10":5,"9":6,"B":3,"_":4,"a":2,"b":1}'
+  },
+  {
+    name: "nested and arrays keep order",
+    input: {
+      z: [
+        3,
+        1,
+        {
+          y: null,
+          x: [
+            true,
+            false
+          ]
+        }
+      ],
+      a: "x"
+    },
+    canonical: '{"a":"x","z":[3,1,{"x":[true,false],"y":null}]}'
+  },
+  {
+    name: "undefined members dropped, null kept",
+    input: {
+      b: null,
+      c: 0
+    },
+    canonical: '{"b":null,"c":0}'
+  },
+  {
+    name: "ascii escapes",
+    input: {
+      s: 'quote " backslash \\ tab 	 newline \n \xE9 \u2713 \u{1F600}'
+    },
+    canonical: '{"s":"quote \\" backslash \\\\ tab \\t newline \\n \\u00e9 \\u2713 \\ud83d\\ude00"}'
+  },
+  {
+    name: "numbers",
+    input: {
+      i: 42,
+      f: 0.5,
+      neg: -1,
+      exp: 1e21,
+      small: 1e-7,
+      zero: 0,
+      negzero: 0
+    },
+    canonical: '{"exp":1e+21,"f":0.5,"i":42,"neg":-1,"negzero":0,"small":1e-7,"zero":0}'
+  },
+  {
+    name: "unicode key",
+    input: {
+      \u043A\u043B\u044E\u0447: 1,
+      key: 2
+    },
+    canonical: '{"key":2,"\\u043a\\u043b\\u044e\\u0447":1}'
+  }
+];
+
+// vectors/hash.json
+var hash_default = [
+  {
+    name: "hold on create_payment above 5000",
+    document: {
+      schemaVersion: "armor.policy.v2",
+      policyId: "11111111-1111-4111-8111-111111111111",
+      target: {
+        agent: "d5c85519-3b8e-4f1e-9d2a-000000000001",
+        mcpServers: [
+          "github"
+        ]
+      },
+      layer: "agent",
+      defaults: {
+        tools: "hold",
+        network: "block",
+        files: "allow",
+        skills: "allow"
+      },
+      capture: {
+        arguments: true,
+        redact: [
+          "*token*"
+        ],
+        maxBytesPerCall: 16384,
+        sample: 1
+      },
+      expiresAt: "never",
+      statements: [
+        {
+          id: "st-pay-hold",
+          subject: null,
+          match: {
+            tool: "create_payment",
+            keyTier: "exact",
+            order: 0
+          },
+          effect: "hold",
+          conditions: [
+            {
+              field: "args.amount",
+              op: "gt",
+              value: 5e3,
+              schemaBinding: {
+                schemaHash: "sha256:1111111111111111111111111111111111111111111111111111111111111111"
+              }
+            }
+          ],
+          approval: {
+            approvers: 2,
+            roles: [
+              "finance_lead"
+            ]
+          },
+          expiresAt: "never",
+          provenance: {
+            ruleKey: "create_payment",
+            variant: 0,
+            source: "yaml",
+            layer: "agent"
+          }
+        },
+        {
+          id: "st-files-ssh",
+          subject: null,
+          match: {
+            capability: "files"
+          },
+          effect: "block",
+          conditions: [
+            {
+              field: "path",
+              op: "glob",
+              value: "~/.ssh/**"
+            }
+          ],
+          expiresAt: "never",
+          provenance: {
+            ruleKey: "files.deny",
+            variant: 0,
+            source: "yaml",
+            layer: "agent"
+          }
+        }
+      ]
+    },
+    policyHash: "sha256:007f204da14735e58b74d23a4909ee972d53cc2c8bd293217b71cab3d7b292bb"
+  },
+  {
+    name: "org floor with no statements",
+    document: {
+      schemaVersion: "armor.policy.v2",
+      policyId: "22222222-2222-4222-8222-222222222222",
+      target: {
+        org: "*"
+      },
+      layer: "floor",
+      defaults: {
+        tools: "hold",
+        network: "block",
+        files: "allow",
+        skills: "allow"
+      },
+      capture: {
+        arguments: false,
+        redact: [],
+        maxBytesPerCall: 0,
+        sample: 0
+      },
+      expiresAt: "2027-01-01T00:00:00Z",
+      statements: []
+    },
+    policyHash: "sha256:02a98fe3c5263f505f72562a87154fc3bd67f561ffb0f264f7fb5b90bd3d65c4"
+  }
+];
+
+// vectors/schema-hash-vectors.json
+var schema_hash_vectors_default = {
+  _comment: [
+    "Golden vectors for the tool-inventory canonicalizer (Tool Inventory PRD T4, armoriq/conmap-auto#968).",
+    "Three implementations must agree byte-for-byte: conmap src/tool-inventory/canonical.ts,",
+    "armoriq-sdk-customer (python) and armoriq-sdk-customer-ts. conmap is the source of truth;",
+    "each SDK keeps a byte-identical copy of this file plus its sha256 in a sibling .sha256, and a",
+    "test in each repo asserts the file still hashes to it -- so changing a vector forces all three",
+    "copies to move together.",
+    "canonicalJson = sorted keys, compact separators, ensure_ascii escaping. This is NOT RFC 8785;",
+    "see the header of canonical.ts for why, and vector 5 for the number forms left outside the",
+    "agreed set."
+  ],
+  algorithm: {
+    canonicalJson: "sorted keys, no whitespace, ASCII-escaped (json.dumps sort_keys=True separators=(',',':') ensure_ascii=True)",
+    schemaHash: "'sha256:' + sha256_hex(canonicalJson(strip description/title only where they are annotation keywords (never as names under properties/patternProperties/$defs/definitions/dependentSchemas or strings in required, never inside enum/const/default/examples values), resolve local #/ $ref)); null when inputSchema is null",
+    manifestHash: "'sha256:' + sha256_hex(canonicalJson({name, description|null, annotations|{}, inputSchema|null}))"
+  },
+  vectors: [
+    {
+      id: 1,
+      name: "key-order-irrelevant",
+      note: "Object keys are sorted, so two spellings that differ only in key order produce identical bytes.",
+      inputSchema: {
+        type: "object",
+        required: [
+          "b"
+        ],
+        properties: {
+          b: {
+            type: "string"
+          },
+          a: {
+            type: "number"
+          }
+        }
+      },
+      schemaHash: "sha256:597b8b01f9b5b640dd6856455c6156c631bb3e36768be54f79f21c89392c064d",
+      equivalentSpellings: [
+        {
+          properties: {
+            a: {
+              type: "number"
+            },
+            b: {
+              type: "string"
+            }
+          },
+          required: [
+            "b"
+          ],
+          type: "object"
+        }
+      ]
+    },
+    {
+      id: 2,
+      name: "nested-description-and-title-stripped",
+      note: "description and title are removed wherever they are schema annotation keywords, so prose-only edits never move schemaHash. Equals vector 1.",
+      inputSchema: {
+        title: "Thing",
+        description: "top level prose",
+        type: "object",
+        required: [
+          "b"
+        ],
+        properties: {
+          a: {
+            type: "number",
+            description: "the a"
+          },
+          b: {
+            title: "B",
+            type: "string",
+            description: "the b"
+          }
+        }
+      },
+      schemaHash: "sha256:597b8b01f9b5b640dd6856455c6156c631bb3e36768be54f79f21c89392c064d",
+      equalsVector: 1
+    },
+    {
+      id: 3,
+      name: "local-ref-resolved",
+      note: "A local #/$defs pointer is inlined before hashing, so spelling a shape out and pointing at it hash the same.",
+      inputSchema: {
+        type: "object",
+        $defs: {
+          Id: {
+            type: "string",
+            pattern: "^[a-z]+$"
+          }
+        },
+        properties: {
+          id: {
+            $ref: "#/$defs/Id"
+          }
+        }
+      },
+      schemaHash: "sha256:ed8f92e2b3119b897b4c3fb2322e4a94aefb4e345b2520c95ef96459ff532073"
+    },
+    {
+      id: 4,
+      name: "unicode-including-astral-plane",
+      note: "Non-ASCII escapes as \\uXXXX; an astral-plane character (U+1F600, U+1F680) escapes as its UTF-16 surrogate pair, matching Python ensure_ascii and JS charCodeAt iteration. All keys here are ASCII on purpose: JS sorts keys by UTF-16 code unit and Python by code point, which differ for astral-plane KEYS, so those are outside the agreed set.",
+      inputSchema: {
+        type: "string",
+        enum: [
+          "caf\xE9",
+          "\u65E5\u672C\u8A9E",
+          "\u{1F600}"
+        ],
+        const: "na\xEFve \u{1F680}"
+      },
+      schemaHash: "sha256:bd1abce15a0b8bcd6e5c0571a22858e1e14d889ed9ffc68fc2c06f4c5c68be40"
+    },
+    {
+      id: 5,
+      name: "number-forms",
+      note: "Numbers are emitted by the host JSON writer, not RFC 8785. Integers and decimals are distinct canonical bytes.",
+      knownDivergence: 'A float-valued integer diverges across languages (Python json.dumps(1.0) -> "1.0", JSON.stringify(1.0) -> "1"), as does -0.0 (Python "-0.0", JS "0"). Neither appears in a real JSON Schema, and neither is in this vector: agreeing on them requires a shared number formatter, which is the RFC 8785 migration, not a patch here.',
+      inputSchema: {
+        type: "number",
+        multipleOf: 1,
+        minimum: 0,
+        maximum: 10,
+        default: 2.5,
+        exclusiveMinimum: -1
+      },
+      schemaHash: "sha256:bcafbb074da1b4c0217c2438646e132ab73398dc1570efd186017abdf21f5029"
+    },
+    {
+      id: 6,
+      name: "empty-object-schema",
+      note: "An empty schema {} is a real, hashable schema. It is NOT the same fact as 'no schema' (vector 7).",
+      inputSchema: {},
+      schemaHash: "sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+    },
+    {
+      id: 7,
+      name: "null-schema-has-no-hash",
+      note: "No schema at all: schemaHash is null, never the hash of {} and never the hash of the string 'null'. FR-7 warns on exactly this row.",
+      inputSchema: null,
+      schemaHash: null,
+      manifestDoc: {
+        name: "unschemad_tool",
+        description: "declared with a name only"
+      },
+      manifestHash: "sha256:61f5054dde7e535542c2e04a739dc78d1341504f798c7642ab9ad29f1b456bee"
+    },
+    {
+      id: 8,
+      name: "array-order-is-significant",
+      note: "Canonicalization sorts object keys and never sequences: reordering prefixItems is a different schema.",
+      inputSchema: {
+        type: "array",
+        prefixItems: [
+          {
+            type: "string"
+          },
+          {
+            type: "number"
+          },
+          {
+            type: "boolean"
+          }
+        ],
+        items: {
+          anyOf: [
+            {
+              type: "null"
+            },
+            {
+              type: "string"
+            }
+          ]
+        }
+      },
+      schemaHash: "sha256:9dd8bbfb2bc524842d1203e4f914a5743cceaa228fcf328182f4bc9260fb747e"
+    },
+    {
+      id: 9,
+      name: "nested-required-arrays",
+      note: "required lists nested inside properties survive verbatim, order included, at every depth.",
+      inputSchema: {
+        type: "object",
+        required: [
+          "outer"
+        ],
+        properties: {
+          outer: {
+            type: "object",
+            required: [
+              "z",
+              "a"
+            ],
+            properties: {
+              z: {
+                type: "string"
+              },
+              a: {
+                type: "object",
+                required: [
+                  "q"
+                ],
+                properties: {
+                  q: {
+                    type: "integer"
+                  }
+                }
+              }
+            }
+          }
+        }
+      },
+      schemaHash: "sha256:864f94090821218ef480510c415eaac315715d2f8ee3be1cbc7517594b51ab13"
+    },
+    {
+      id: 10,
+      name: "booleans-nulls-and-escaped-strings",
+      note: "true/false/null literals, and a string carrying a quote, a backslash, a tab, a newline and a control character.",
+      inputSchema: {
+        type: "object",
+        additionalProperties: false,
+        deprecated: true,
+        properties: {
+          q: {
+            type: "string",
+            default: 'he said "hi"	one\\two\nthree
',
+            const: null
+          }
+        }
+      },
+      schemaHash: "sha256:f5cdf2e3025ce09cb931b6cc918484a14de97a057e9667874593f0a3bc50877c"
+    },
+    {
+      id: 11,
+      name: "argument-named-description-is-kept",
+      note: "`description` and `title` are stripped only as schema annotation keywords, never as argument names under `properties`, `required`, `patternProperties`, `$defs`, `definitions` or `dependentSchemas`. create_ticket(title, description, priority) must NOT hash like create_ticket(priority). The annotation on `priority` is stripped; the two argument names are kept. `equivalentSpellings` differs only in annotation prose and must hash identically; `distinctSpelling` drops the two arguments and must NOT.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          title: {
+            type: "string",
+            title: "Title",
+            description: "Short summary"
+          },
+          description: {
+            type: "string",
+            description: "Long form body"
+          },
+          priority: {
+            type: "integer",
+            description: "P0-P3"
+          }
+        },
+        required: [
+          "title",
+          "description"
+        ]
+      },
+      schemaHash: "sha256:996c1f968a21b24a3f171a432a3de33257901beb2d172e3dfa3d345b7e3e6a3c",
+      equivalentSpellings: [
+        {
+          type: "object",
+          properties: {
+            title: {
+              type: "string"
+            },
+            description: {
+              type: "string",
+              title: "Body"
+            },
+            priority: {
+              type: "integer"
+            }
+          },
+          required: [
+            "title",
+            "description"
+          ]
+        }
+      ],
+      distinctSpelling: {
+        type: "object",
+        properties: {
+          priority: {
+            type: "integer"
+          }
+        }
+      }
+    },
+    {
+      id: 12,
+      name: "real-mcp-input-schema",
+      note: "A verbatim MCP tools/list inputSchema (GitHub MCP create_issue), prose included, with the manifestHash of the full tool entry.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          owner: {
+            type: "string",
+            description: "Repository owner"
+          },
+          repo: {
+            type: "string",
+            description: "Repository name"
+          },
+          title: {
+            type: "string",
+            description: "Issue title"
+          },
+          body: {
+            type: "string",
+            description: "Issue body content"
+          },
+          assignees: {
+            type: "array",
+            items: {
+              type: "string"
+            },
+            description: "Usernames to assign"
+          },
+          labels: {
+            type: "array",
+            items: {
+              type: "string"
+            },
+            description: "Labels to apply"
+          },
+          milestone: {
+            type: "number",
+            description: "Milestone number"
+          }
+        },
+        required: [
+          "owner",
+          "repo",
+          "title"
+        ],
+        additionalProperties: false,
+        $schema: "http://json-schema.org/draft-07/schema#"
+      },
+      schemaHash: "sha256:b06130f66f945f4ca2bc4474340c7f934c5e7b10168978fb8f507ecc146c091b",
+      manifestDoc: {
+        name: "create_issue",
+        description: "Create a new issue in a GitHub repository",
+        annotations: {
+          readOnlyHint: false,
+          destructiveHint: false,
+          idempotentHint: false
+        },
+        inputSchema: {
+          type: "object",
+          properties: {
+            owner: {
+              type: "string",
+              description: "Repository owner"
+            },
+            repo: {
+              type: "string",
+              description: "Repository name"
+            },
+            title: {
+              type: "string",
+              description: "Issue title"
+            },
+            body: {
+              type: "string",
+              description: "Issue body content"
+            },
+            assignees: {
+              type: "array",
+              items: {
+                type: "string"
+              },
+              description: "Usernames to assign"
+            },
+            labels: {
+              type: "array",
+              items: {
+                type: "string"
+              },
+              description: "Labels to apply"
+            },
+            milestone: {
+              type: "number",
+              description: "Milestone number"
+            }
+          },
+          required: [
+            "owner",
+            "repo",
+            "title"
+          ],
+          additionalProperties: false,
+          $schema: "http://json-schema.org/draft-07/schema#"
+        }
+      },
+      manifestHash: "sha256:a0bc53dbf453b8c5860924781ddc912d1b118a64adb3ee4b5089bf599b936113"
+    },
+    {
+      id: 13,
+      name: "data-literals-are-not-schemas",
+      note: "The values of `enum`, `const`, `default` and `examples` are data, not schema nodes: a `title` or `description` key inside them is part of the value and is kept verbatim. `equivalentSpellings` reorders keys inside the literals only; `distinctSpelling` removes those keys from the literals and must NOT hash equal.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          payload: {
+            type: "object",
+            default: {
+              title: "Untitled",
+              description: "",
+              priority: 2
+            },
+            examples: [
+              {
+                title: "First",
+                description: "Body"
+              }
+            ]
+          },
+          kind: {
+            type: "object",
+            enum: [
+              {
+                title: "bug"
+              },
+              {
+                title: "task"
+              }
+            ],
+            const: {
+              description: "fixed"
+            }
+          }
+        }
+      },
+      schemaHash: "sha256:cae41d7dfcc5d51cf9ce1756903979b1fc5754fa8e95a69d9e5bec5df0266dc8",
+      equivalentSpellings: [
+        {
+          properties: {
+            kind: {
+              const: {
+                description: "fixed"
+              },
+              enum: [
+                {
+                  title: "bug"
+                },
+                {
+                  title: "task"
+                }
+              ],
+              type: "object"
+            },
+            payload: {
+              examples: [
+                {
+                  description: "Body",
+                  title: "First"
+                }
+              ],
+              default: {
+                priority: 2,
+                description: "",
+                title: "Untitled"
+              },
+              type: "object"
+            }
+          },
+          type: "object"
+        }
+      ],
+      distinctSpelling: {
+        type: "object",
+        properties: {
+          payload: {
+            type: "object",
+            default: {
+              priority: 2
+            },
+            examples: [
+              {}
+            ]
+          },
+          kind: {
+            type: "object",
+            enum: [
+              {},
+              {}
+            ],
+            const: {}
+          }
+        }
+      }
+    }
+  ]
+};
+
+// vectors/evaluate.json
+var evaluate_default = [
+  { id: "VE-1", name: "absent argument in when falls through to the next variant", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-pay-hold", subject: null, conditions: [{ field: "args.amount", op: "gt", value: 5e3, schemaBinding: { schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" } }], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "hold", approval: { approvers: 2, roles: ["finance_lead"] } }, { id: "st-pay-allow", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 1, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 1 }, effect: "allow" }] } }, input: { tool: "create_payment", arguments: { recipient: "acme" }, timestamp: "2026-09-18T12:00:00Z" }, expect: { verdict: "allow", statementId: "st-pay-allow", layer: "agent", ruleKey: "create_payment" } },
+  { id: "VE-8", name: "hold carries its resolved approval", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-pay-hold", subject: null, conditions: [{ field: "args.amount", op: "gt", value: 5e3, schemaBinding: { schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" } }], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "hold", approval: { approvers: 2, roles: ["finance_lead"] } }, { id: "st-pay-allow", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 1, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 1 }, effect: "allow" }] } }, input: { tool: "create_payment", arguments: { amount: 9e3 }, timestamp: "2026-09-18T12:00:00Z", schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }, expect: { verdict: "hold", statementId: "st-pay-hold", layer: "agent", ruleKey: "create_payment", approval: { approvers: 2, roles: ["finance_lead"] }, obligations: [] } },
+  { id: "VE-2", name: "schema drift still evaluates by name and attaches schema_drift", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-pay-hold", subject: null, conditions: [{ field: "args.amount", op: "gt", value: 5e3, schemaBinding: { schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" } }], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "hold", approval: { approvers: 2, roles: ["finance_lead"] } }, { id: "st-pay-allow", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 1, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 1 }, effect: "allow" }] } }, input: { tool: "create_payment", arguments: { amount: 9e3 }, timestamp: "2026-09-18T12:00:00Z", schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" }, expect: { verdict: "hold", statementId: "st-pay-hold", layer: "agent", ruleKey: "create_payment", obligations: [{ type: "schema_drift", statementId: "st-pay-hold", bound: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", observed: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" }] } },
+  { id: "VE-3", name: "exact key beats glob key", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-glob", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "mcp__github__*", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "mcp__github__*", keyTier: "glob", order: 0 }, effect: "allow" }, { id: "st-exact", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "mcp__github__create_issue", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "mcp__github__create_issue", keyTier: "exact", order: 0 }, effect: "hold" }] } }, input: { tool: "mcp__github__create_issue", arguments: {}, timestamp: "2026-09-18T12:00:00Z" }, expect: { verdict: "hold", statementId: "st-exact", layer: "agent", ruleKey: "mcp__github__create_issue" } },
+  { id: "VE-3b", name: "longer glob beats shorter glob", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-short", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "mcp__*", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "mcp__*", keyTier: "glob", order: 0 }, effect: "allow" }, { id: "st-long", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "mcp__github__*", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "mcp__github__*", keyTier: "glob", order: 0 }, effect: "hold" }] } }, input: { tool: "mcp__github__delete_repo", arguments: {}, timestamp: "2026-09-18T12:00:00Z" }, expect: { verdict: "hold", statementId: "st-long", layer: "agent", ruleKey: "mcp__github__*" } },
+  { id: "VE-4", name: "floor merge: files.deny blocks a Read the agent allows", bound: { floor: { schemaVersion: "armor.policy.v2", policyId: "p-floor", target: { org: "*" }, layer: "floor", defaults: { tools: "allow", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-ssh", subject: null, conditions: [{ field: "path", op: "glob", value: "**/.ssh/**" }], expiresAt: "never", provenance: { ruleKey: "files", variant: 0, source: "yaml", layer: "floor" }, match: { capability: "files" }, effect: "block" }] }, agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-read", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "Read", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "Read", keyTier: "exact", order: 0 }, effect: "allow" }] } }, input: { tool: "Read", arguments: { file_path: "/home/u/.ssh/id_rsa" }, timestamp: "2026-09-18T12:00:00Z", capabilities: ["files"], derived: { path: "/home/u/.ssh/id_rsa" } }, expect: { verdict: "block", statementId: "st-ssh", layer: "floor", ruleKey: "files" } },
+  { id: "VE-4b", name: "floor capability rule does not fire outside its path glob", bound: { floor: { schemaVersion: "armor.policy.v2", policyId: "p-floor", target: { org: "*" }, layer: "floor", defaults: { tools: "allow", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-ssh", subject: null, conditions: [{ field: "path", op: "glob", value: "**/.ssh/**" }], expiresAt: "never", provenance: { ruleKey: "files", variant: 0, source: "yaml", layer: "floor" }, match: { capability: "files" }, effect: "block" }] }, agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-read", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "Read", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "Read", keyTier: "exact", order: 0 }, effect: "allow" }] } }, input: { tool: "Read", arguments: { file_path: "/home/u/notes.md" }, timestamp: "2026-09-18T12:00:00Z", capabilities: ["files"], derived: { path: "/home/u/notes.md" } }, expect: { verdict: "allow", statementId: "st-read", layer: "agent", ruleKey: "Read" } },
+  { id: "VE-5", name: "member overlay loosens the base for alice only", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-base", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "block" }, { id: "st-alice", subject: { membershipId: "m-alice" }, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "allow" }] } }, input: { tool: "create_payment", arguments: { amount: 10 }, timestamp: "2026-09-18T12:00:00Z", member: { membershipId: "m-alice" } }, expect: { verdict: "allow", statementId: "st-alice", layer: "member", ruleKey: "create_payment" } },
+  { id: "VE-5a", name: "everyone else keeps the base verdict", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-base", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "block" }, { id: "st-alice", subject: { membershipId: "m-alice" }, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "allow" }] } }, input: { tool: "create_payment", arguments: { amount: 10 }, timestamp: "2026-09-18T12:00:00Z", member: { membershipId: "m-carol" } }, expect: { verdict: "block", statementId: "st-base", layer: "agent", ruleKey: "create_payment" } },
+  { id: "VE-5b", name: "member overlay tightens the base for bob", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-base", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "search_transactions", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "search_transactions", keyTier: "exact", order: 0 }, effect: "allow" }, { id: "st-bob", subject: { email: "Bob@Example.com" }, conditions: [], expiresAt: "never", provenance: { ruleKey: "search_transactions", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "search_transactions", keyTier: "exact", order: 0 }, effect: "block" }] } }, input: { tool: "search_transactions", arguments: {}, timestamp: "2026-09-18T12:00:00Z", member: { email: "bob@example.com" } }, expect: { verdict: "block", statementId: "st-bob", layer: "member", ruleKey: "search_transactions" } },
+  { id: "VE-5c", name: "org floor beats any member grant", bound: { floor: { schemaVersion: "armor.policy.v2", policyId: "p-floor", target: { org: "*" }, layer: "floor", defaults: { tools: "allow", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-floor", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "delete_all", variant: 0, source: "yaml", layer: "floor" }, match: { tool: "delete_all", keyTier: "exact", order: 0 }, effect: "block" }] }, agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-alice", subject: { membershipId: "m-alice" }, conditions: [], expiresAt: "never", provenance: { ruleKey: "delete_all", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "delete_all", keyTier: "exact", order: 0 }, effect: "allow" }] } }, input: { tool: "delete_all", arguments: {}, timestamp: "2026-09-18T12:00:00Z", member: { membershipId: "m-alice" } }, expect: { verdict: "block", statementId: "st-floor", layer: "floor", ruleKey: "delete_all" } },
+  { id: "VE-5d", name: "expired member rule is skipped", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-base", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "block" }, { id: "st-alice", subject: { membershipId: "m-alice" }, conditions: [], expiresAt: "2026-01-01T00:00:00Z", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "allow" }] } }, input: { tool: "create_payment", arguments: {}, timestamp: "2026-09-18T12:00:00Z", member: { membershipId: "m-alice" } }, expect: { verdict: "block", statementId: "st-base", layer: "agent", ruleKey: "create_payment" } },
+  { id: "VE-5e", name: "member key specificity: membershipId beats email beats group", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-group", subject: { group: "finance" }, conditions: [], expiresAt: "never", provenance: { ruleKey: "x", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "x", keyTier: "exact", order: 0 }, effect: "block" }, { id: "st-email", subject: { email: "alice@example.com" }, conditions: [], expiresAt: "never", provenance: { ruleKey: "x", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "x", keyTier: "exact", order: 0 }, effect: "hold" }, { id: "st-id", subject: { membershipId: "m-alice" }, conditions: [], expiresAt: "never", provenance: { ruleKey: "x", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "x", keyTier: "exact", order: 0 }, effect: "allow" }] } }, input: { tool: "x", arguments: {}, timestamp: "2026-09-18T12:00:00Z", member: { membershipId: "m-alice", email: "alice@example.com", groups: ["finance"] } }, expect: { verdict: "allow", statementId: "st-id", layer: "member", ruleKey: "x" } },
+  { id: "VE-5f", name: "member key specificity: email beats group when no membershipId rule exists", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-group", subject: { group: "finance" }, conditions: [], expiresAt: "never", provenance: { ruleKey: "x", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "x", keyTier: "exact", order: 0 }, effect: "block" }, { id: "st-email", subject: { email: "alice@example.com" }, conditions: [], expiresAt: "never", provenance: { ruleKey: "x", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "x", keyTier: "exact", order: 0 }, effect: "hold" }] } }, input: { tool: "x", arguments: {}, timestamp: "2026-09-18T12:00:00Z", member: { membershipId: "m-alice", email: "alice@example.com", groups: ["finance"] } }, expect: { verdict: "hold", statementId: "st-email", layer: "member", ruleKey: "x" } },
+  { id: "VE-6", name: "unknown tool goes to the most specific tools.default, never a wildcard", bound: { floor: { schemaVersion: "armor.policy.v2", policyId: "p-floor", target: { org: "*" }, layer: "floor", defaults: { tools: "allow", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [] }, agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-pay-hold", subject: null, conditions: [{ field: "args.amount", op: "gt", value: 5e3, schemaBinding: { schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" } }], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "hold", approval: { approvers: 2, roles: ["finance_lead"] } }, { id: "st-pay-allow", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 1, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 1 }, effect: "allow" }] } }, input: { tool: "brand_new_tool", arguments: {}, timestamp: "2026-09-18T12:00:00Z" }, expect: { verdict: "hold", statementId: null, layer: "agent", ruleKey: "tools.default" } },
+  { id: "VE-7", name: "variant order: first match wins", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-rm", subject: null, conditions: [{ field: "args.command", op: "regex", value: "\\brm\\s+-rf\\b" }], expiresAt: "never", provenance: { ruleKey: "Bash", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "Bash", keyTier: "exact", order: 0 }, effect: "block" }, { id: "st-safe", subject: null, conditions: [{ field: "program", op: "in", value: ["git", "ls", "rm"] }], expiresAt: "never", provenance: { ruleKey: "Bash", variant: 1, source: "yaml", layer: "agent" }, match: { tool: "Bash", keyTier: "exact", order: 1 }, effect: "allow" }] } }, input: { tool: "Bash", arguments: { command: "rm -rf /tmp/x" }, timestamp: "2026-09-18T12:00:00Z", derived: { program: "rm" } }, expect: { verdict: "block", statementId: "st-rm", layer: "agent", ruleKey: "Bash" } },
+  { id: "VE-9", name: "provenance names the deciding statement, key and variant", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-pay-hold", subject: null, conditions: [{ field: "args.amount", op: "gt", value: 5e3, schemaBinding: { schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" } }], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "hold", approval: { approvers: 2, roles: ["finance_lead"] } }, { id: "st-pay-allow", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 1, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 1 }, effect: "allow" }] } }, input: { tool: "create_payment", arguments: { amount: 1 }, timestamp: "2026-09-18T12:00:00Z" }, expect: { verdict: "allow", statementId: "st-pay-allow", layer: "agent", ruleKey: "create_payment" } },
+  { id: "VE-11", name: "agent policy overrides group policy, loosening", bound: { group: { schemaVersion: "armor.policy.v2", policyId: "p-group", target: { group: "payments" }, layer: "group", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-g", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "group" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "hold" }] }, agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-a", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "create_payment", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "create_payment", keyTier: "exact", order: 0 }, effect: "allow" }] } }, input: { tool: "create_payment", arguments: {}, timestamp: "2026-09-18T12:00:00Z" }, expect: { verdict: "allow", statementId: "st-a", layer: "agent", ruleKey: "create_payment" } },
+  { id: "VE-11b", name: "agent policy overrides group policy, tightening", bound: { group: { schemaVersion: "armor.policy.v2", policyId: "p-group", target: { group: "payments" }, layer: "group", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-g", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "Read", variant: 0, source: "yaml", layer: "group" }, match: { tool: "Read", keyTier: "exact", order: 0 }, effect: "allow" }] }, agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-a", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "Read", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "Read", keyTier: "exact", order: 0 }, effect: "block" }] } }, input: { tool: "Read", arguments: {}, timestamp: "2026-09-18T12:00:00Z" }, expect: { verdict: "block", statementId: "st-a", layer: "agent", ruleKey: "Read" } },
+  { id: "VE-12", name: "group policy applies when the agent policy is silent", bound: { group: { schemaVersion: "armor.policy.v2", policyId: "p-group", target: { group: "payments" }, layer: "group", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-g", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "search_transactions", variant: 0, source: "yaml", layer: "group" }, match: { tool: "search_transactions", keyTier: "exact", order: 0 }, effect: "hold" }] }, agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-a", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "Read", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "Read", keyTier: "exact", order: 0 }, effect: "allow" }] } }, input: { tool: "search_transactions", arguments: {}, timestamp: "2026-09-18T12:00:00Z" }, expect: { verdict: "hold", statementId: "st-g", layer: "group", ruleKey: "search_transactions" } },
+  { id: "VE-13", name: "floor beats both group and agent", bound: { floor: { schemaVersion: "armor.policy.v2", policyId: "p-floor", target: { org: "*" }, layer: "floor", defaults: { tools: "allow", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-f", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "delete_all", variant: 0, source: "yaml", layer: "floor" }, match: { tool: "delete_all", keyTier: "exact", order: 0 }, effect: "block" }] }, group: { schemaVersion: "armor.policy.v2", policyId: "p-group", target: { group: "payments" }, layer: "group", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-g", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "delete_all", variant: 0, source: "yaml", layer: "group" }, match: { tool: "delete_all", keyTier: "exact", order: 0 }, effect: "allow" }] }, agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-a", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "delete_all", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "delete_all", keyTier: "exact", order: 0 }, effect: "allow" }] } }, input: { tool: "delete_all", arguments: {}, timestamp: "2026-09-18T12:00:00Z" }, expect: { verdict: "block", statementId: "st-f", layer: "floor", ruleKey: "delete_all" } },
+  { id: "VE-13b", name: "a floor hold tightens an agent allow but yields to an agent block", bound: { floor: { schemaVersion: "armor.policy.v2", policyId: "p-floor", target: { org: "*" }, layer: "floor", defaults: { tools: "allow", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-f", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "deploy", variant: 0, source: "yaml", layer: "floor" }, match: { tool: "deploy", keyTier: "exact", order: 0 }, effect: "hold" }] }, agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-a", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "deploy", variant: 0, source: "yaml", layer: "agent" }, match: { tool: "deploy", keyTier: "exact", order: 0 }, effect: "allow" }] } }, input: { tool: "deploy", arguments: {}, timestamp: "2026-09-18T12:00:00Z" }, expect: { verdict: "hold", statementId: "st-f", layer: "floor", ruleKey: "deploy" } },
+  { id: "VE-14", name: "capability rule binds by tag only: tagged tool holds", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "allow", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-destructive", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "destructive", variant: 0, source: "yaml", layer: "agent" }, match: { capability: "destructive" }, effect: "hold" }] } }, input: { tool: "mcp__jira__delete_issue", arguments: {}, timestamp: "2026-09-18T12:00:00Z", capabilities: ["destructive"] }, expect: { verdict: "hold", statementId: "st-destructive", layer: "agent", ruleKey: "destructive" } },
+  { id: "VE-14b", name: "capability rule binds by tag only: untagged tool on the same server gets tools.default", bound: { agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "allow", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [{ id: "st-destructive", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "destructive", variant: 0, source: "yaml", layer: "agent" }, match: { capability: "destructive" }, effect: "hold" }] } }, input: { tool: "mcp__jira__list_issues", arguments: {}, timestamp: "2026-09-18T12:00:00Z", capabilities: [] }, expect: { verdict: "allow", statementId: null, layer: "agent", ruleKey: "tools.default" } },
+  { id: "VE-15", name: "an expired document contributes nothing", bound: { group: { schemaVersion: "armor.policy.v2", policyId: "p-group", target: { group: "payments" }, layer: "group", defaults: { tools: "hold", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "2026-01-01T00:00:00Z", statements: [{ id: "st-g", subject: null, conditions: [], expiresAt: "never", provenance: { ruleKey: "x", variant: 0, source: "yaml", layer: "group" }, match: { tool: "x", keyTier: "exact", order: 0 }, effect: "block" }] }, agent: { schemaVersion: "armor.policy.v2", policyId: "p-agent", target: { agent: "aaaaaaaa-0000-4000-8000-000000000001" }, layer: "agent", defaults: { tools: "allow", network: "block", files: "allow", skills: "allow" }, capture: { arguments: true, redact: ["*token*"], maxBytesPerCall: 16384, sample: 1 }, expiresAt: "never", statements: [] } }, input: { tool: "x", arguments: {}, timestamp: "2026-09-18T12:00:00Z" }, expect: { verdict: "allow", statementId: null, layer: "agent", ruleKey: "tools.default" } }
+];
+
+// vectors/document.json
+var document_default = [
+  { id: "VC-1", name: "the full v2 document parses and validates", yaml: `apiVersion: armor.io/v2
+kind: Policy
+metadata:
+  name: vector
+  orgId: 11111111-1111-4111-8111-111111111111
+target:
+  agent: aaaaaaaa-0000-4000-8000-000000000001
+  mcpServers: [github]
+spec:
+  tools:
+    default: hold
+    rules:
+      Read: allow
+      "mcp__github__*": allow
+      destructive: hold
+      file.write:
+        - when: {path: {glob: "**/*.tf"}}
+          action: hold
+          controls: [SOC2-CC8.1]
+        - action: allow
+      Bash:
+        - when: {command: {matches: '(^|\\s)rm\\s+-[a-zA-Z]*[rf]'}}
+          action: block
+          reason: recursive force delete
+          controls: [SOC2-CC6.1]
+        - when: {program: {in: [ls, grep, cat, git]}, writeRedirection: {eq: false}}
+          action: allow
+        - action: hold
+      create_payment:
+        - when: {args.amount: {gt: 5000}}
+          action: hold
+          approval: {approvers: 2, roles: [finance_lead]}
+          controls: [SOC2-CC6.1, SOC2-CC7.2]
+        - action: allow
+  files:
+    deny: ["~/.ssh/**", "**/.env*", "**/*.pem"]
+    allowOutsideWorkspace: false
+  network:
+    default: block
+    allow: ["*.github.com", {host: api.stripe.com, reason: payments}]
+    deny: [{host: 169.254.169.254, reason: AWS IMDS credentials endpoint}]
+  skills:
+    default: allow
+    hold: ["*:deploy*"]
+  members:
+    "alice@armoriq.io":
+      tools:
+        rules:
+          create_payment:
+            - action: allow
+              expiresAt: 2026-12-31T00:00:00Z
+      expiresAt: never
+    "bob@armoriq.io":
+      tools: {rules: {search_transactions: block}}
+    "team:interns":
+      tools: {default: block}
+  capture:
+    arguments: true
+    redact: ["*token*", "*secret*", "authorization"]
+    maxBytesPerCall: 16384
+    sample: 1.0
+  approvalDefaults: {approvers: 1, roles: [admin]}
+`, expect: { errors: [], warnings: ["loosening_grant"] } },
+  { id: "VC-2", name: "an unknown key is a compile error", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      Read: allow\n  denyTools: [rm]\n", expect: { errors: ["unknown_key"], warnings: [] } },
+  { id: "VC-2b", name: "a v1 status field is an unknown key", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      Read: allow\n  status: active\n", expect: { errors: ["unknown_key"], warnings: [] } },
+  { id: "VC-5", name: "a variant after an unconditional one is unreachable", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      Bash:\n        - action: allow\n        - when: {args.command: {matches: 'rm'}}\n          action: block\n", expect: { errors: ["unreachable_variant"], warnings: [] } },
+  { id: "VC-6", name: "a hold with no approver and no approvalDefaults is an error", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      create_payment: hold\n", expect: { errors: ["hold_without_approver"], warnings: [] } },
+  { id: "VC-6b", name: "a hold resolved by approvalDefaults is clean", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      create_payment: hold\n  approvalDefaults: {approvers: 1, roles: [admin]}\n", expect: { errors: [], warnings: [] } },
+  { id: "VC-6c", name: "an approval that names nobody is unresolvable", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      create_payment:\n        - action: hold\n          approval: {approvers: 2}\n", expect: { errors: ["approval_unresolvable"], warnings: [] } },
+  { id: "VC-7", name: "a member grant that loosens the base is flagged for review", yaml: 'apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      create_payment: block\n  members:\n    "alice@armoriq.io":\n      tools: {rules: {create_payment: allow}}\n', expect: { errors: [], warnings: ["loosening_grant"] } },
+  { id: "VC-7t", name: "a member rule that tightens the base is not flagged", yaml: 'apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      search_transactions: allow\n  members:\n    "bob@armoriq.io":\n      tools: {rules: {search_transactions: block}}\n', expect: { errors: [], warnings: [] } },
+  { id: "VC-17", name: "device: local is accepted", yaml: `apiVersion: armor.io/v2
+kind: Policy
+metadata:
+  name: vector
+target: {device: local}
+spec:
+  tools:
+    default: hold
+    rules:
+      Read: allow
+      "mcp__github__*": allow
+      destructive: hold
+      file.write:
+        - when: {path: {glob: "**/*.tf"}}
+          action: hold
+          controls: [SOC2-CC8.1]
+        - action: allow
+      Bash:
+        - when: {command: {matches: '(^|\\s)rm\\s+-[a-zA-Z]*[rf]'}}
+          action: block
+          reason: recursive force delete
+          controls: [SOC2-CC6.1]
+        - when: {program: {in: [ls, grep, cat, git]}, writeRedirection: {eq: false}}
+          action: allow
+        - action: hold
+      create_payment:
+        - when: {args.amount: {gt: 5000}}
+          action: hold
+          approval: {approvers: 2, roles: [finance_lead]}
+          controls: [SOC2-CC6.1, SOC2-CC7.2]
+        - action: allow
+  files:
+    deny: ["~/.ssh/**", "**/.env*", "**/*.pem"]
+    allowOutsideWorkspace: false
+  network:
+    default: block
+    allow: ["*.github.com", {host: api.stripe.com, reason: payments}]
+    deny: [{host: 169.254.169.254, reason: AWS IMDS credentials endpoint}]
+  skills:
+    default: allow
+    hold: ["*:deploy*"]
+  capture:
+    arguments: true
+    redact: ["*token*", "*secret*", "authorization"]
+    maxBytesPerCall: 16384
+    sample: 1.0
+  approvalDefaults: {approvers: 1, roles: [admin]}
+`, expect: { errors: [], warnings: [] } },
+  { id: "VC-17b", name: "target product is an unknown key", yaml: `apiVersion: armor.io/v2
+kind: Policy
+metadata:
+  name: vector
+  orgId: 11111111-1111-4111-8111-111111111111
+target: {product: armorclaude}
+spec:
+  tools:
+    default: hold
+    rules:
+      Read: allow
+      "mcp__github__*": allow
+      destructive: hold
+      file.write:
+        - when: {path: {glob: "**/*.tf"}}
+          action: hold
+          controls: [SOC2-CC8.1]
+        - action: allow
+      Bash:
+        - when: {command: {matches: '(^|\\s)rm\\s+-[a-zA-Z]*[rf]'}}
+          action: block
+          reason: recursive force delete
+          controls: [SOC2-CC6.1]
+        - when: {program: {in: [ls, grep, cat, git]}, writeRedirection: {eq: false}}
+          action: allow
+        - action: hold
+      create_payment:
+        - when: {args.amount: {gt: 5000}}
+          action: hold
+          approval: {approvers: 2, roles: [finance_lead]}
+          controls: [SOC2-CC6.1, SOC2-CC7.2]
+        - action: allow
+  files:
+    deny: ["~/.ssh/**", "**/.env*", "**/*.pem"]
+    allowOutsideWorkspace: false
+  network:
+    default: block
+    allow: ["*.github.com", {host: api.stripe.com, reason: payments}]
+    deny: [{host: 169.254.169.254, reason: AWS IMDS credentials endpoint}]
+  skills:
+    default: allow
+    hold: ["*:deploy*"]
+  members:
+    "alice@armoriq.io":
+      tools:
+        rules:
+          create_payment:
+            - action: allow
+              expiresAt: 2026-12-31T00:00:00Z
+      expiresAt: never
+    "bob@armoriq.io":
+      tools: {rules: {search_transactions: block}}
+    "team:interns":
+      tools: {default: block}
+  capture:
+    arguments: true
+    redact: ["*token*", "*secret*", "authorization"]
+    maxBytesPerCall: 16384
+    sample: 1.0
+  approvalDefaults: {approvers: 1, roles: [admin]}
+`, expect: { errors: ["target_form", "unknown_key"], warnings: [] } },
+  { id: "VC-18", name: "products and precedence are local only", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\nprecedence: device-first\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      Read: allow\n  products:\n    claude-code: {tools: {rules: {Bash: block}}}\n", expect: { errors: ["local_only_section", "local_only_section"], warnings: [] } },
+  { id: "VC-18b", name: "members is enterprise only", yaml: 'apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\ntarget: {device: local}\nspec:\n  tools:\n    default: hold\n    rules:\n      Read: allow\n  members:\n    "alice@armoriq.io": {tools: {rules: {Read: block}}}\n', expect: { errors: ["enterprise_only_section"], warnings: [] } },
+  { id: "VC-11c", name: "a condition takes exactly one operator", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      create_payment:\n        - when: {args.amount: {gt: 5000, lt: 9000}}\n          action: block\n", expect: { errors: ["condition_operator"], warnings: [] } },
+  { id: "VC-11d", name: "a numeric operator rejects a string operand", yaml: 'apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      create_payment:\n        - when: {args.amount: {gt: "5000"}}\n          action: block\n', expect: { errors: ["condition_operand"], warnings: [] } },
+  { id: "VC-11e", name: "matches rejects a lookaround the Rego evaluator cannot run", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    default: hold\n    rules:\n      Bash:\n        - when: {command: {matches: '(?=rm)'}}\n          action: block\n", expect: { errors: ["condition_operand"], warnings: [] } },
+  { id: "VC-1b", name: "tools.default is required", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\n  mcpServers: [github]\nspec:\n  tools:\n    rules:\n      Read: allow\n", expect: { errors: ["expected_verdict"], warnings: [] } }
+];
+
+// vectors/compile.json
+var compile_default = [
+  { id: "VC-14", name: "schemaHash of the declared tool is bound on every args condition (FR-14)", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\nspec:\n  tools:\n    default: hold\n    rules:\n      create_payment:\n        - when: {args.amount: {gt: 5000}}\n          action: hold\n          approval: {approvers: 2, roles: [finance_lead]}\n        - action: allow\n  approvalDefaults: {approvers: 1, roles: [admin]}\n", inventory: [{ name: "create_payment", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "Read", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", inputSchema: { type: "object", properties: { file_path: { type: "string" } } }, declared: true }, { name: "create_issue", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__create_issue", capabilities: ["destructive"] }, { name: "list_issues", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__list_issues", capabilities: [] }, { name: "delete_repo", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__delete_repo", capabilities: ["destructive"] }, { name: "observed_only", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: null, declared: false }], expect: { errors: [], warnings: [], statementIds: ["st-create-payment-0", "st-create-payment-1"], bindings: { "st-create-payment-0": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" } } },
+  { id: "VC-15", name: "an unknown control identifier compiles with a warning naming it", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\nspec:\n  tools:\n    default: hold\n    rules:\n      Read:\n        - action: allow\n          controls: [SOC2-CC6.1, NOT-A-CONTROL]\n  approvalDefaults: {approvers: 1, roles: [admin]}\n", inventory: [{ name: "create_payment", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "Read", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", inputSchema: { type: "object", properties: { file_path: { type: "string" } } }, declared: true }, { name: "create_issue", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__create_issue", capabilities: ["destructive"] }, { name: "list_issues", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__list_issues", capabilities: [] }, { name: "delete_repo", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__delete_repo", capabilities: ["destructive"] }, { name: "observed_only", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: null, declared: false }], expect: { errors: [], warnings: ["unknown_control"], statementIds: ["st-read-0"] } },
+  { id: "VC-8", name: "a rule key not in the inventory compiles with a warning", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\nspec:\n  tools:\n    default: hold\n    rules:\n      nonexistent_tool: block\n  approvalDefaults: {approvers: 1, roles: [admin]}\n", inventory: [{ name: "create_payment", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "Read", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", inputSchema: { type: "object", properties: { file_path: { type: "string" } } }, declared: true }, { name: "create_issue", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__create_issue", capabilities: ["destructive"] }, { name: "list_issues", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__list_issues", capabilities: [] }, { name: "delete_repo", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__delete_repo", capabilities: ["destructive"] }, { name: "observed_only", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: null, declared: false }], expect: { errors: [], warnings: ["unknown_tool_key"], statementIds: ["st-nonexistent-tool-0"] } },
+  { id: "VC-8b", name: "an observed-only tool compiles without a binding and says so", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\nspec:\n  tools:\n    default: hold\n    rules:\n      observed_only:\n        - when: {args.x: {exists: true}}\n          action: block\n  approvalDefaults: {approvers: 1, roles: [admin]}\n", inventory: [{ name: "create_payment", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "Read", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", inputSchema: { type: "object", properties: { file_path: { type: "string" } } }, declared: true }, { name: "create_issue", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__create_issue", capabilities: ["destructive"] }, { name: "list_issues", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__list_issues", capabilities: [] }, { name: "delete_repo", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__delete_repo", capabilities: ["destructive"] }, { name: "observed_only", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: null, declared: false }], expect: { errors: [], warnings: ["observed_only_tool"], bindings: { "st-observed-only-0": null } } },
+  { id: "VC-9", name: "an args key the schema does not declare compiles with a warning", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\nspec:\n  tools:\n    default: hold\n    rules:\n      create_payment:\n        - when: {args.nonexistent: {gt: 5}}\n          action: block\n  approvalDefaults: {approvers: 1, roles: [admin]}\n", inventory: [{ name: "create_payment", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "Read", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", inputSchema: { type: "object", properties: { file_path: { type: "string" } } }, declared: true }, { name: "create_issue", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__create_issue", capabilities: ["destructive"] }, { name: "list_issues", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__list_issues", capabilities: [] }, { name: "delete_repo", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__delete_repo", capabilities: ["destructive"] }, { name: "observed_only", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: null, declared: false }], expect: { errors: [], warnings: ["unknown_argument"] } },
+  { id: "VC-3", name: "exact and glob keys lower with their tier and the exact key binds", yaml: 'apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\nspec:\n  tools:\n    default: hold\n    rules:\n      mcp__github__create_issue: hold\n      "mcp__github__*": allow\n  approvalDefaults: {approvers: 1, roles: [admin]}\n', inventory: [{ name: "create_payment", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "Read", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", inputSchema: { type: "object", properties: { file_path: { type: "string" } } }, declared: true }, { name: "create_issue", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__create_issue", capabilities: ["destructive"] }, { name: "list_issues", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__list_issues", capabilities: [] }, { name: "delete_repo", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__delete_repo", capabilities: ["destructive"] }, { name: "observed_only", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: null, declared: false }], expect: { errors: [], warnings: [], statementIds: ["st-mcp-github-create-issue-0", "st-mcp-github-0"] } },
+  { id: "VC-4", name: "two same-length globs matching one real tool is a compile error", yaml: 'apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\nspec:\n  tools:\n    default: hold\n    rules:\n      "mcp__github__*": allow\n      "*_create_issue": block\n  approvalDefaults: {approvers: 1, roles: [admin]}\n', inventory: [{ name: "create_payment", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "Read", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", inputSchema: { type: "object", properties: { file_path: { type: "string" } } }, declared: true }, { name: "create_issue", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__create_issue", capabilities: ["destructive"] }, { name: "list_issues", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__list_issues", capabilities: [] }, { name: "delete_repo", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__delete_repo", capabilities: ["destructive"] }, { name: "observed_only", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: null, declared: false }], expect: { errors: ["ambiguous_glob"], warnings: [] } },
+  { id: "VC-3c", name: "a bare name declared on two owners asks for the qualified form", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\nspec:\n  tools:\n    default: hold\n    rules:\n      shared_tool: allow\n  approvalDefaults: {approvers: 1, roles: [admin]}\n", inventory: [{ name: "shared_tool", owner: { type: "mcp_server", id: "srv-a", name: "a" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "shared_tool", owner: { type: "mcp_server", id: "srv-b", name: "b" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }], expect: { errors: ["ambiguous_tool_key"], warnings: [] } },
+  { id: "VC-14c", name: "a capability key compiles as a capability statement and the report lists uncovered tools", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\nspec:\n  tools:\n    default: hold\n    rules:\n      destructive: hold\n  approvalDefaults: {approvers: 1, roles: [admin]}\n", inventory: [{ name: "create_payment", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "Read", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", inputSchema: { type: "object", properties: { file_path: { type: "string" } } }, declared: true }, { name: "create_issue", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__create_issue", capabilities: ["destructive"] }, { name: "list_issues", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__list_issues", capabilities: [] }, { name: "delete_repo", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__delete_repo", capabilities: ["destructive"] }, { name: "observed_only", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: null, declared: false }], expect: { errors: [], warnings: [], statementIds: ["st-destructive-0"], report: { sections: { tools: "enforced" }, notCoveredByCapabilityRules: ["Read", "create_payment", "mcp__github__list_issues", "observed_only"] } } },
+  { id: "VC-11", name: "enforceability on an enterprise target: files and network argument-only, skills and secrets inert", yaml: 'apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\nspec:\n  tools:\n    default: hold\n    rules:\n      Read: allow\n  approvalDefaults: {approvers: 1, roles: [admin]}\n  files: {deny: ["~/.ssh/**"]}\n  network: {default: block, allow: ["*.github.com"]}\n  skills: {hold: ["*:deploy*"]}\n  secrets: {envBlocklist: [AWS_SECRET_ACCESS_KEY]}\n', inventory: [{ name: "create_payment", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "Read", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", inputSchema: { type: "object", properties: { file_path: { type: "string" } } }, declared: true }, { name: "create_issue", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__create_issue", capabilities: ["destructive"] }, { name: "list_issues", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__list_issues", capabilities: [] }, { name: "delete_repo", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__delete_repo", capabilities: ["destructive"] }, { name: "observed_only", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: null, declared: false }], expect: { errors: [], warnings: [], statementIds: ["st-read-0", "st-files-block-0", "st-network-allow-0", "st-skills-hold-0", "st-secrets-block-0"], report: { sections: { tools: "enforced", files: "argument-only", network: "argument-only", skills: "inert", secrets: "inert" }, notCoveredByCapabilityRules: [] } } },
+  { id: "VC-11b", name: "enforceability on a local device: every section enforced", yaml: 'apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\ntarget: {device: local}\nspec:\n  tools:\n    default: hold\n    rules:\n      Read: allow\n  approvalDefaults: {approvers: 1, roles: [admin]}\n  files: {deny: ["~/.ssh/**"], allowOutsideWorkspace: false}\n  secrets: {envBlocklist: [GITHUB_TOKEN]}\n', inventory: [], expect: { errors: [], warnings: ["unknown_tool_key"], statementIds: ["st-read-0", "st-files-block-0", "st-files-block-1", "st-secrets-block-0"], report: { sections: { tools: "enforced", files: "enforced", secrets: "enforced" }, notCoveredByCapabilityRules: [] } } },
+  { id: "VC-12", name: "a group target compiles with layer group", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  group: payments\nspec:\n  tools:\n    default: hold\n    rules:\n      Read: allow\n  approvalDefaults: {approvers: 1, roles: [admin]}\n", inventory: [{ name: "create_payment", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "Read", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", inputSchema: { type: "object", properties: { file_path: { type: "string" } } }, declared: true }, { name: "create_issue", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__create_issue", capabilities: ["destructive"] }, { name: "list_issues", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__list_issues", capabilities: [] }, { name: "delete_repo", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__delete_repo", capabilities: ["destructive"] }, { name: "observed_only", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: null, declared: false }], expect: { errors: [], warnings: [], statementIds: ["st-read-0"] } },
+  { id: "VC-16", name: "member rule expiry earlier than its scope wins; scope expiry bounds a rule with none", yaml: 'apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\n  orgId: 11111111-1111-4111-8111-111111111111\ntarget:\n  agent: aaaaaaaa-0000-4000-8000-000000000001\nspec:\n  tools:\n    default: hold\n    rules:\n      create_payment: block\n  approvalDefaults: {approvers: 1, roles: [admin]}\n  members:\n    "alice@armoriq.io":\n      tools:\n        rules:\n          create_payment:\n            - action: allow\n              expiresAt: 2026-06-01T00:00:00Z\n          Read: allow\n      expiresAt: 2026-12-31T00:00:00Z\n', inventory: [{ name: "create_payment", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true }, { name: "Read", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", inputSchema: { type: "object", properties: { file_path: { type: "string" } } }, declared: true }, { name: "create_issue", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__create_issue", capabilities: ["destructive"] }, { name: "list_issues", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__list_issues", capabilities: [] }, { name: "delete_repo", owner: { type: "mcp_server", id: "srv-github", name: "github" }, schemaHash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", inputSchema: { type: "object", properties: { amount: { type: "number" }, recipient: { type: "string" } } }, declared: true, qualifiedName: "mcp__github__delete_repo", capabilities: ["destructive"] }, { name: "observed_only", owner: { type: "agent", id: "agent-1", name: "support-agent" }, schemaHash: null, declared: false }], expect: { errors: [], warnings: ["loosening_grant", "loosening_grant"], statementIds: ["st-create-payment-0", "st-create-payment-alice-armoriq-io-0", "st-read-alice-armoriq-io-0"], expiries: { "st-create-payment-alice-armoriq-io-0": "2026-06-01T00:00:00.000Z", "st-read-alice-armoriq-io-0": "2026-12-31T00:00:00.000Z" } } },
+  { id: "VC-18c", name: "under device-first a products overlay may only tighten", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\ntarget: {device: local}\nspec:\n  tools:\n    default: hold\n    rules:\n      Bash: hold\n  approvalDefaults: {approvers: 1, roles: [admin]}\n  products:\n    claude-code: {tools: {rules: {Bash: allow}}}\n", inventory: [], expect: { errors: ["device_first_loosening"], warnings: ["loosening_grant", "unknown_tool_key", "unknown_tool_key"] } },
+  { id: "VC-18d", name: "under agent-first a products overlay may loosen, flagged for review", yaml: "apiVersion: armor.io/v2\nkind: Policy\nmetadata:\n  name: vector\nprecedence: agent-first\ntarget: {device: local}\nspec:\n  tools:\n    default: hold\n    rules:\n      Bash: hold\n  approvalDefaults: {approvers: 1, roles: [admin]}\n  products:\n    claude-code: {tools: {rules: {Bash: allow}}}\n", inventory: [], expect: { errors: [], warnings: ["loosening_grant", "unknown_tool_key", "unknown_tool_key"], statementIds: ["st-bash-0", "st-bash-claude-code-0"] } }
+];
+
+// src/vectors.ts
+var vectors = {
+  canonical: canonical_default,
+  hash: hash_default,
+  schemaHash: schema_hash_vectors_default,
+  evaluate: evaluate_default,
+  document: document_default,
+  compile: compile_default
+};
+export {
+  vectors
+};
+//# sourceMappingURL=vectors.js.map