approval-md 0.0.1 → 0.2.0

package/schema/fixtures/event/valid/reconciliation-satisfied.json

@@ -0,0 +1,17 @@
+{
+  "seq": 24,
+  "ts": "2026-08-04T11:02:17Z",
+  "event": "reconciliation.satisfied",
+  "task": "task-049",
+  "action_key": "task-049:archive:2026-08-04",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "obligation_seq": 17,
+    "note": "restored the archived records; the revert went through the gate as task-049:restore:2026-08-04",
+    "revert_action_key": "task-049:restore:2026-08-04"
+  },
+  "alg": "sha256/jcs",
+  "prev": "1b4f2d0c1a7f4d6de1c0ad2ff9b5a4c3e2d1908f7a6b5c4d3e2f1a0b9c8d7e6f",
+  "hash": "9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a8b"
+}

package/schema/fixtures/event/valid/route-accepted.json

@@ -0,0 +1,15 @@
+{
+  "seq": 3,
+  "ts": "2026-08-04T09:13:02Z",
+  "event": "route.accepted",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "system:router",
+  "payload": {
+    "class": "comms.external",
+    "autonomy": "manual"
+  },
+  "alg": "sha256/jcs",
+  "prev": "4945705a2e1d9310eb24732f938fcbdf5d7d0cc1586ec45f4b2ac55f9a096f61",
+  "hash": "373aa302b5317fc7dc6c6f103bda2f49bb39013774910451339904bc48eab50f"
+}

package/schema/fixtures/event/valid/route-proposed.json

@@ -0,0 +1,16 @@
+{
+  "seq": 2,
+  "ts": "2026-08-04T09:12:02Z",
+  "event": "route.proposed",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "agent:planner",
+  "channel": "cli",
+  "payload": {
+    "class": "comms.external",
+    "autonomy": "manual"
+  },
+  "alg": "sha256/jcs",
+  "prev": "129eaa2bad261af1367f963979287653173eba8adce9961f09f08970f38d838f",
+  "hash": "4945705a2e1d9310eb24732f938fcbdf5d7d0cc1586ec45f4b2ac55f9a096f61"
+}

package/schema/fixtures/event/valid/spec-example.json

@@ -0,0 +1,15 @@
+{
+  "seq": 17,
+  "ts": "2026-08-04T09:14:02Z",
+  "event": "approval.granted",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "note": "go, but cc me"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b3c9197a2e2e644a440db3444ca5b5ebd30a35059eaa5e77bd3817d821df0e86",
+  "hash": "a41f9ea247b708fa05baac2e1f6c53a7074039fe65f295726010ff39ccc747ad"
+}

package/schema/fixtures/event/valid/task-registered-harness-version.json

@@ -0,0 +1,23 @@
+{
+  "seq": 7,
+  "ts": "2026-09-04T10:22:14Z",
+  "event": "task.registered",
+  "task": "hook:sess-1:toolu-9",
+  "actor": "agent:claude-code",
+  "payload": {
+    "state": "proposed",
+    "actions": [
+      {
+        "class": "vcs.push.branch",
+        "summary": "git push origin aprv-227-harness-version",
+        "idempotency_key": "hook:sess-1:toolu-9:vcs.push.branch",
+        "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
+      }
+    ],
+    "harness": "claude-code",
+    "harness_version": "2.0.14 (Claude Code)"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b1cbb27b12bd811a9d197f5fb1c494c191040271901214286f0c10bc84820173",
+  "hash": "129eaa2bad261af1367f963979287653173eba8adce9961f09f08970f38d838f"
+}

package/schema/fixtures/event/valid/task-registered.json

@@ -0,0 +1,14 @@
+{
+  "seq": 1,
+  "ts": "2026-08-04T09:11:02Z",
+  "event": "task.registered",
+  "task": "task-042",
+  "actor": "agent:planner",
+  "channel": "cli",
+  "payload": {
+    "title": "Chase the overdue invoice"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b1cbb27b12bd811a9d197f5fb1c494c191040271901214286f0c10bc84820173",
+  "hash": "129eaa2bad261af1367f963979287653173eba8adce9961f09f08970f38d838f"
+}

package/schema/fixtures/hash/known-answer-pre-121.json

@@ -0,0 +1,74 @@
+[
+  {
+    "name": "genesis-task-registered",
+    "note": "SPEC.md §6.1 chaser story, first record of a fresh log: prev is null. `input` is the complete record minus `hash` — exactly the hash input. A change to any value here is a hash-scheme change, not a refactor.",
+    "input": {
+      "seq": 1,
+      "ts": "2026-08-04T09:11:02Z",
+      "event": "task.registered",
+      "actor": "agent:planner",
+      "alg": "sha256/jcs",
+      "prev": null,
+      "task": "task-042",
+      "channel": "cli",
+      "payload": {
+        "title": "Chase the overdue invoice",
+        "envelope": "backlog/task-042.md"
+      }
+    },
+    "expected_canonical": "{\"actor\":\"agent:planner\",\"alg\":\"sha256/jcs\",\"channel\":\"cli\",\"event\":\"task.registered\",\"payload\":{\"envelope\":\"backlog/task-042.md\",\"title\":\"Chase the overdue invoice\"},\"prev\":null,\"seq\":1,\"task\":\"task-042\",\"ts\":\"2026-08-04T09:11:02Z\"}",
+    "expected_hash": "6a076d1e8930f73be61ba514c804ec06516ae4798b5f9c67a0612eec6faae7e6"
+  },
+  {
+    "name": "chained-approval-requested",
+    "note": "Second record: prev is the genesis record's hash, so the digest commits to the chain.",
+    "input": {
+      "seq": 2,
+      "ts": "2026-08-04T09:13:40Z",
+      "event": "approval.requested",
+      "actor": "agent:chaser",
+      "alg": "sha256/jcs",
+      "prev": "6a076d1e8930f73be61ba514c804ec06516ae4798b5f9c67a0612eec6faae7e6",
+      "task": "task-042",
+      "action_key": "task-042:chaser:2026-08-04",
+      "channel": "telegram",
+      "payload": {
+        "class": "communicate.email.external",
+        "est_cost_usd": 0,
+        "reversible": false
+      }
+    },
+    "expected_canonical": "{\"action_key\":\"task-042:chaser:2026-08-04\",\"actor\":\"agent:chaser\",\"alg\":\"sha256/jcs\",\"channel\":\"telegram\",\"event\":\"approval.requested\",\"payload\":{\"class\":\"communicate.email.external\",\"est_cost_usd\":0,\"reversible\":false},\"prev\":\"6a076d1e8930f73be61ba514c804ec06516ae4798b5f9c67a0612eec6faae7e6\",\"seq\":2,\"task\":\"task-042\",\"ts\":\"2026-08-04T09:13:40Z\"}",
+    "expected_hash": "7768c23cf976931643bde54c3e02a18f6ac4706c560b57c4521e76bd4ffabcc3"
+  },
+  {
+    "name": "unicode-numbers-and-unsorted-nested-keys",
+    "note": "RFC 8785 key sorting at two nesting levels, non-ASCII payload text emitted literally, and ECMAScript number formatting (0.5, 100, 1200).",
+    "input": {
+      "seq": 3,
+      "ts": "2026-08-04T09:14:02Z",
+      "event": "approval.granted",
+      "actor": "human:carter",
+      "alg": "sha256/jcs",
+      "prev": "7768c23cf976931643bde54c3e02a18f6ac4706c560b57c4521e76bd4ffabcc3",
+      "task": "task-042",
+      "action_key": "task-042:chaser:2026-08-04",
+      "channel": "telegram",
+      "payload": {
+        "note": "chase the £1,200 déjà-vu invoice ☑",
+        "amounts": {
+          "total_gbp": 1200,
+          "share": 0.5,
+          "retries": 100
+        },
+        "zulu": [
+          "b",
+          "a"
+        ],
+        "Álvaro": "approver"
+      }
+    },
+    "expected_canonical": "{\"action_key\":\"task-042:chaser:2026-08-04\",\"actor\":\"human:carter\",\"alg\":\"sha256/jcs\",\"channel\":\"telegram\",\"event\":\"approval.granted\",\"payload\":{\"amounts\":{\"retries\":100,\"share\":0.5,\"total_gbp\":1200},\"note\":\"chase the £1,200 déjà-vu invoice ☑\",\"zulu\":[\"b\",\"a\"],\"Álvaro\":\"approver\"},\"prev\":\"7768c23cf976931643bde54c3e02a18f6ac4706c560b57c4521e76bd4ffabcc3\",\"seq\":3,\"task\":\"task-042\",\"ts\":\"2026-08-04T09:14:02Z\"}",
+    "expected_hash": "2f4cd2927b66ac9b5bdcb8186c05f521ace5a05ade16048117d1fbbd9d505d20"
+  }
+]

package/schema/fixtures/hash/known-answer.json

@@ -0,0 +1,74 @@
+[
+  {
+    "name": "genesis-task-registered",
+    "note": "SPEC.md §6.1 chaser story, first record of a fresh log: prev is null. `input` is the complete record minus `hash` — exactly the hash input. A change to any value here is a hash-scheme change, not a refactor.",
+    "input": {
+      "seq": 1,
+      "ts": "2026-08-04T09:11:02Z",
+      "event": "task.registered",
+      "actor": "agent:planner",
+      "alg": "sha256/jcs",
+      "prev": null,
+      "task": "task-042",
+      "channel": "cli",
+      "payload": {
+        "title": "Chase the overdue invoice",
+        "envelope": "backlog/task-042.md"
+      }
+    },
+    "expected_canonical": "{\"actor\":\"agent:planner\",\"alg\":\"sha256/jcs\",\"channel\":\"cli\",\"event\":\"task.registered\",\"payload\":{\"envelope\":\"backlog/task-042.md\",\"title\":\"Chase the overdue invoice\"},\"prev\":null,\"seq\":1,\"task\":\"task-042\",\"ts\":\"2026-08-04T09:11:02Z\"}",
+    "expected_hash": "6a076d1e8930f73be61ba514c804ec06516ae4798b5f9c67a0612eec6faae7e6"
+  },
+  {
+    "name": "chained-approval-requested",
+    "note": "Second record: prev is the genesis record's hash, so the digest commits to the chain. `est_cost_usd` is the canonical decimal string of APRV-121; the pre-APRV-121 vectors, with the same record carrying the JSON number 0, are frozen alongside in known-answer-pre-121.json.",
+    "input": {
+      "seq": 2,
+      "ts": "2026-08-04T09:13:40Z",
+      "event": "approval.requested",
+      "actor": "agent:chaser",
+      "alg": "sha256/jcs",
+      "prev": "6a076d1e8930f73be61ba514c804ec06516ae4798b5f9c67a0612eec6faae7e6",
+      "task": "task-042",
+      "action_key": "task-042:chaser:2026-08-04",
+      "channel": "telegram",
+      "payload": {
+        "class": "communicate.email.external",
+        "est_cost_usd": "0",
+        "reversible": false
+      }
+    },
+    "expected_canonical": "{\"action_key\":\"task-042:chaser:2026-08-04\",\"actor\":\"agent:chaser\",\"alg\":\"sha256/jcs\",\"channel\":\"telegram\",\"event\":\"approval.requested\",\"payload\":{\"class\":\"communicate.email.external\",\"est_cost_usd\":\"0\",\"reversible\":false},\"prev\":\"6a076d1e8930f73be61ba514c804ec06516ae4798b5f9c67a0612eec6faae7e6\",\"seq\":2,\"task\":\"task-042\",\"ts\":\"2026-08-04T09:13:40Z\"}",
+    "expected_hash": "951325fd9756ab9496273602ab4dbb9c13dffb607450744c14f0e64fce81e2bc"
+  },
+  {
+    "name": "unicode-numbers-and-unsorted-nested-keys",
+    "note": "RFC 8785 key sorting at two nesting levels, non-ASCII payload text emitted literally, and ECMAScript number formatting (0.5, 100, 1200) — the payload's `amounts` block is arbitrary caller data, not a gated monetary field, so it keeps the numbers that make this vector a number-serialization pin.",
+    "input": {
+      "seq": 3,
+      "ts": "2026-08-04T09:14:02Z",
+      "event": "approval.granted",
+      "actor": "human:carter",
+      "alg": "sha256/jcs",
+      "prev": "951325fd9756ab9496273602ab4dbb9c13dffb607450744c14f0e64fce81e2bc",
+      "task": "task-042",
+      "action_key": "task-042:chaser:2026-08-04",
+      "channel": "telegram",
+      "payload": {
+        "note": "chase the £1,200 déjà-vu invoice ☑",
+        "amounts": {
+          "total_gbp": 1200,
+          "share": 0.5,
+          "retries": 100
+        },
+        "zulu": [
+          "b",
+          "a"
+        ],
+        "Álvaro": "approver"
+      }
+    },
+    "expected_canonical": "{\"action_key\":\"task-042:chaser:2026-08-04\",\"actor\":\"human:carter\",\"alg\":\"sha256/jcs\",\"channel\":\"telegram\",\"event\":\"approval.granted\",\"payload\":{\"amounts\":{\"retries\":100,\"share\":0.5,\"total_gbp\":1200},\"note\":\"chase the £1,200 déjà-vu invoice ☑\",\"zulu\":[\"b\",\"a\"],\"Álvaro\":\"approver\"},\"prev\":\"951325fd9756ab9496273602ab4dbb9c13dffb607450744c14f0e64fce81e2bc\",\"seq\":3,\"task\":\"task-042\",\"ts\":\"2026-08-04T09:14:02Z\"}",
+    "expected_hash": "819a937c7829ee39afc9b9c48670080208147c9cd78d016f3c43a3653db8e076"
+  }
+]

package/schema/fixtures/policy/invalid/bad-approval-ttl.json

@@ -0,0 +1,7 @@
+{
+  "version": "0.1",
+  "defaults": {
+    "autonomy": "manual",
+    "approval_ttl": "24 hours"
+  }
+}

package/schema/fixtures/policy/invalid/bad-web-port.json

@@ -0,0 +1,4 @@
+{
+  "version": "0.1",
+  "channels": { "web": { "port": 70000 } }
+}

package/schema/fixtures/policy/invalid/checkpoint-key-not-base64.json

@@ -0,0 +1,6 @@
+{
+  "version": "0.1",
+  "audit": {
+    "checkpoint_keys": ["not a key, and not base64 either"]
+  }
+}

package/schema/fixtures/policy/invalid/class-rule-missing-autonomy.json

@@ -0,0 +1,9 @@
+{
+  "version": "0.1",
+  "classes": {
+    "financial.spend": {
+      "approvers": ["carter"],
+      "limits": { "daily_usd": 100 }
+    }
+  }
+}

package/schema/fixtures/policy/invalid/empty-class-key.json

@@ -0,0 +1,6 @@
+{
+  "version": "0.1",
+  "classes": {
+    "": { "autonomy": "manual" }
+  }
+}

package/schema/fixtures/policy/invalid/live-rate-on-human-only.json

@@ -0,0 +1,7 @@
+{
+  "version": "0.1",
+  "defaults": { "autonomy": "manual" },
+  "classes": {
+    "account.credential": { "autonomy": "human-only", "live_rate": 0.5 }
+  }
+}

package/schema/fixtures/policy/invalid/malformed-class-key.json

@@ -0,0 +1,6 @@
+{
+  "version": "0.1",
+  "classes": {
+    "Communicate..Email": { "autonomy": "manual" }
+  }
+}

package/schema/fixtures/policy/invalid/missing-version.json

@@ -0,0 +1,8 @@
+{
+  "defaults": {
+    "autonomy": "manual",
+    "channel": "telegram",
+    "approval_ttl": "24h",
+    "on_expiry": "reject"
+  }
+}

package/schema/fixtures/policy/invalid/negative-limit.json

@@ -0,0 +1,9 @@
+{
+  "version": "0.1",
+  "classes": {
+    "financial.spend": {
+      "autonomy": "manual",
+      "limits": { "per_action_usd": -25 }
+    }
+  }
+}

package/schema/fixtures/policy/invalid/non-numeric-limit.json

@@ -0,0 +1,9 @@
+{
+  "version": "0.1",
+  "classes": {
+    "financial.spend": {
+      "autonomy": "manual",
+      "limits": { "per_action_usd": "25 USD" }
+    }
+  }
+}

package/schema/fixtures/policy/invalid/non-positive-max-pending.json

@@ -0,0 +1,9 @@
+{
+  "version": "0.1",
+  "classes": {
+    "communicate.email.external": {
+      "autonomy": "manual",
+      "limits": { "max_pending": 0 }
+    }
+  }
+}

package/schema/fixtures/policy/invalid/on-expiry-grant.json

@@ -0,0 +1,8 @@
+{
+  "version": "0.1",
+  "defaults": {
+    "autonomy": "manual",
+    "approval_ttl": "24h",
+    "on_expiry": "grant"
+  }
+}

package/schema/fixtures/policy/invalid/payload-retention-bare-number.json

@@ -0,0 +1,4 @@
+{
+  "version": "0.1",
+  "payload_retention": 30
+}

package/schema/fixtures/policy/invalid/payload-retention-compound.json

@@ -0,0 +1,4 @@
+{
+  "version": "0.1",
+  "payload_retention": "1h30m"
+}

package/schema/fixtures/policy/invalid/payload-retention-fractional.json

@@ -0,0 +1,4 @@
+{
+  "version": "0.1",
+  "payload_retention": "1.5h"
+}

package/schema/fixtures/policy/invalid/payload-retention-zero.json

@@ -0,0 +1,4 @@
+{
+  "version": "0.1",
+  "payload_retention": "0d"
+}

package/schema/fixtures/policy/invalid/protected-paths-escape.json

@@ -0,0 +1,4 @@
+{
+  "version": "0.1",
+  "protected_paths": ["../outside/SPEC.md"]
+}

package/schema/fixtures/policy/invalid/protected-paths-glob.json

@@ -0,0 +1,4 @@
+{
+  "version": "0.1",
+  "protected_paths": ["docs/*.md"]
+}

package/schema/fixtures/policy/invalid/retro-rate-on-human-only.json

@@ -0,0 +1,7 @@
+{
+  "version": "0.1",
+  "defaults": { "autonomy": "manual" },
+  "classes": {
+    "account.credential": { "autonomy": "human-only", "retro_rate": 0.5 }
+  }
+}

package/schema/fixtures/policy/invalid/retro-rate-on-manual.json

@@ -0,0 +1,7 @@
+{
+  "version": "0.1",
+  "defaults": { "autonomy": "manual" },
+  "classes": {
+    "financial.spend": { "autonomy": "manual", "retro_rate": 0.5 }
+  }
+}

package/schema/fixtures/policy/invalid/retro-rate-zero.json

@@ -0,0 +1,7 @@
+{
+  "version": "0.1",
+  "defaults": { "autonomy": "manual" },
+  "classes": {
+    "record.write.stage": { "autonomy": "supervised-retro", "retro_rate": 0 }
+  }
+}

package/schema/fixtures/policy/invalid/sample-rate-too-high.json

@@ -0,0 +1,5 @@
+{
+  "version": "0.1",
+  "defaults": { "autonomy": "supervised" },
+  "audit": { "supervised_sample_rate": 1.5 }
+}

package/schema/fixtures/policy/invalid/sampling-secret-env-empty.json

@@ -0,0 +1,7 @@
+{
+  "version": "0.1",
+  "audit": {
+    "supervised_sample_rate": 0.1,
+    "sampling_secret_env": ""
+  }
+}

package/schema/fixtures/policy/invalid/sampling-secret-env-not-string.json

@@ -0,0 +1,6 @@
+{
+  "version": "0.1",
+  "audit": {
+    "sampling_secret_env": true
+  }
+}

package/schema/fixtures/policy/invalid/skew-tolerance-compound.json

@@ -0,0 +1,6 @@
+{
+  "version": "0.1",
+  "audit": {
+    "skew_tolerance": "1s500ms"
+  }
+}

package/schema/fixtures/policy/invalid/unknown-autonomy.json

@@ -0,0 +1,7 @@
+{
+  "version": "0.1",
+  "defaults": { "autonomy": "manual" },
+  "classes": {
+    "financial.spend": { "autonomy": "yolo" }
+  }
+}

package/schema/fixtures/policy/invalid/unknown-class-rule-key.json

@@ -0,0 +1,6 @@
+{
+  "version": "0.1",
+  "classes": {
+    "public.post": { "autonomy": "manual", "aproovers": ["carter"] }
+  }
+}

package/schema/fixtures/policy/invalid/unknown-top-level-key.json

@@ -0,0 +1,7 @@
+{
+  "version": "0.1",
+  "defaults": { "autonomy": "manual" },
+  "polices": {
+    "financial.spend": { "autonomy": "manual" }
+  }
+}

package/schema/fixtures/policy/invalid/vault-passphrase-env-empty.json

@@ -0,0 +1,6 @@
+{
+  "version": "0.1",
+  "vault": {
+    "passphrase_env": ""
+  }
+}

package/schema/fixtures/policy/invalid/vault-passphrase-literal.json

@@ -0,0 +1,6 @@
+{
+  "version": "0.1",
+  "vault": {
+    "passphrase": "not-a-real-secret-and-still-refused"
+  }
+}

package/schema/fixtures/policy/invalid/version-not-string.json

@@ -0,0 +1,4 @@
+{
+  "version": 0.1,
+  "defaults": { "autonomy": "manual" }
+}

package/schema/fixtures/policy/valid/canonical.json

@@ -0,0 +1,47 @@
+{
+  "version": "0.1",
+  "defaults": {
+    "autonomy": "manual",
+    "channel": "telegram",
+    "approval_ttl": "24h",
+    "on_expiry": "reject"
+  },
+  "approvers": {
+    "alice": {
+      "channels": ["telegram", "cli"]
+    }
+  },
+  "classes": {
+    "read.*": { "autonomy": "autonomous" },
+    "files.write.workspace": { "autonomy": "autonomous" },
+    "calendar.write.own": { "autonomy": "supervised" },
+    "communicate.email.draft": { "autonomy": "autonomous" },
+    "communicate.email.external": {
+      "autonomy": "manual",
+      "approvers": ["alice"]
+    },
+    "financial.spend": {
+      "autonomy": "manual",
+      "approvers": ["alice"],
+      "limits": { "per_action_usd": 25, "daily_usd": 100 }
+    },
+    "public.post": { "autonomy": "manual" },
+    "data.delete": { "autonomy": "manual" },
+    "account.auth": { "autonomy": "manual" }
+  },
+  "budgets": {
+    "global": { "daily_usd": 100, "daily_actions": 200 }
+  },
+  "audit": {
+    "supervised_sample_rate": 0.1
+  },
+  "channels": {
+    "telegram": {
+      "chat_id_env": "APPROVAL_TG_CHAT",
+      "token_env": "APPROVAL_TG_TOKEN"
+    },
+    "web": {
+      "port": 4680
+    }
+  }
+}

package/schema/fixtures/policy/valid/checkpoint-keys.json

@@ -0,0 +1,18 @@
+{
+  "version": "0.1",
+  "defaults": {
+    "autonomy": "manual",
+    "approval_ttl": "24h",
+    "on_expiry": "reject"
+  },
+  "classes": {
+    "record.write.stage": { "autonomy": "supervised" }
+  },
+  "audit": {
+    "checkpoint_every": "24h",
+    "checkpoint_keys": [
+      "MCowBQYDK2VwAyEA9dqzvJnn0VtpD6ETeDRUsCn4l6MPyfaV9Xx6KN+e678=",
+      "MCowBQYDK2VwAyEAGb9ECWmEzf6FQbrBZ9w7lshQhqowtrbLDFw4rXAxZuE="
+    ]
+  }
+}

package/schema/fixtures/policy/valid/class-approvers-limits.json

@@ -0,0 +1,25 @@
+{
+  "version": "0.1",
+  "defaults": {
+    "autonomy": "manual",
+    "channel": "telegram",
+    "approval_ttl": "30m",
+    "on_expiry": "reject"
+  },
+  "approvers": {
+    "carter": { "channels": ["telegram"] },
+    "ops-oncall": { "channels": ["telegram", "web", "cli"] }
+  },
+  "classes": {
+    "financial.spend": {
+      "autonomy": "manual",
+      "approvers": ["carter", "ops-oncall"],
+      "limits": {
+        "per_action_usd": 25,
+        "daily_usd": 100,
+        "daily_actions": 5
+      }
+    },
+    "communicate.email.draft": { "autonomy": "autonomous" }
+  }
+}

package/schema/fixtures/policy/valid/class-retro-rate.json

@@ -0,0 +1,17 @@
+{
+  "version": "0.1",
+  "defaults": { "autonomy": "manual" },
+  "classes": {
+    "record.write.stage": { "autonomy": "supervised-retro", "retro_rate": 0.5 },
+    "record.write.draft": { "autonomy": "supervised" },
+    "files.write.*": {
+      "autonomy": "supervised-live",
+      "live_rate": 0.1,
+      "retro_rate": 1
+    }
+  },
+  "audit": {
+    "supervised_sample_rate": 0.1,
+    "sampling_secret_env": "APPROVAL_SAMPLING_SECRET"
+  }
+}

package/schema/fixtures/policy/valid/global-budgets.json

@@ -0,0 +1,19 @@
+{
+  "version": "0.1",
+  "defaults": {
+    "autonomy": "supervised",
+    "channel": "web"
+  },
+  "budgets": {
+    "global": { "daily_usd": 100, "daily_actions": 200 },
+    "research": { "daily_usd": 12.5 },
+    "outbound": { "daily_actions": 20 }
+  },
+  "audit": {
+    "supervised_sample_rate": 0
+  },
+  "channels": {
+    "web": { "port": 4680 },
+    "matrix": { "homeserver_env": "APPROVAL_MATRIX_HS" }
+  }
+}