approval-md 0.1.0 → 0.3.0

package/schema/fixtures/codex-instance/invalid/unpinned-codex-version.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "approval.codex.instance.v1",
+  "instance_id": "team",
+  "platform": "darwin",
+  "codex_version": "0.153.0",
+  "node_version": "20.19.0",
+  "package_version": "0.1.0",
+  "paths": {
+    "install_root": "/Library/Application Support/approval-codex",
+    "package_root": "/Library/Application Support/approval-codex/package",
+    "workspace": "/Users/_approval_codex/workspace",
+    "primary": "/Users/operator/approval-primary",
+    "policy": "/Users/operator/approval-primary/APPROVAL.md",
+    "log": "/Users/operator/approval-primary/.approval/log/events.jsonl",
+    "manifest": "/Library/Application Support/approval-codex/instances/team.json",
+    "codex_executable": "/Library/Application Support/approval-codex/bin/codex",
+    "node_executable": "/Library/Application Support/approval-codex/bin/node",
+    "mcp_executable": "/Library/Application Support/approval-codex/bin/approval-codex-mcp",
+    "broker_executable": "/Library/Application Support/approval-codex/bin/approval-codex-broker",
+    "runner_executable": "/Library/Application Support/approval-codex/bin/approval-codex-runner"
+  },
+  "principals": {
+    "codex": "_approval_codex",
+    "broker": "_approval_broker",
+    "runner": "_approval_runner"
+  },
+  "invocation": {
+    "command": "/Library/Application Support/approval-codex/bin/approval-codex-mcp",
+    "args": [
+      "codex",
+      "serve",
+      "--manifest",
+      "/Library/Application Support/approval-codex/instances/team.json"
+    ]
+  },
+  "components": {
+    "broker": "required-not-shipped",
+    "runner": "required-not-shipped"
+  }
+}

package/schema/fixtures/codex-instance/valid/canonical.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "approval.codex.instance.v1",
+  "instance_id": "team",
+  "platform": "darwin",
+  "codex_version": "0.152.1",
+  "node_version": "20.19.0",
+  "package_version": "0.1.0",
+  "paths": {
+    "install_root": "/Library/Application Support/approval-codex",
+    "package_root": "/Library/Application Support/approval-codex/package",
+    "workspace": "/Users/_approval_codex/workspace",
+    "primary": "/Users/operator/approval-primary",
+    "policy": "/Users/operator/approval-primary/APPROVAL.md",
+    "log": "/Users/operator/approval-primary/.approval/log/events.jsonl",
+    "manifest": "/Library/Application Support/approval-codex/instances/team.json",
+    "codex_executable": "/Library/Application Support/approval-codex/bin/codex",
+    "node_executable": "/Library/Application Support/approval-codex/bin/node",
+    "mcp_executable": "/Library/Application Support/approval-codex/bin/approval-codex-mcp",
+    "broker_executable": "/Library/Application Support/approval-codex/bin/approval-codex-broker",
+    "runner_executable": "/Library/Application Support/approval-codex/bin/approval-codex-runner"
+  },
+  "principals": {
+    "codex": "_approval_codex",
+    "broker": "_approval_broker",
+    "runner": "_approval_runner"
+  },
+  "invocation": {
+    "command": "/Library/Application Support/approval-codex/bin/approval-codex-mcp",
+    "args": [
+      "codex",
+      "serve",
+      "--manifest",
+      "/Library/Application Support/approval-codex/instances/team.json"
+    ]
+  },
+  "components": {
+    "broker": "required-not-shipped",
+    "runner": "required-not-shipped"
+  }
+}

package/schema/fixtures/event/invalid/approval-granted-sender-hashed-false.json

@@ -0,0 +1,20 @@
+{
+  "seq": 94,
+  "ts": "2026-09-19T21:20:03Z",
+  "event": "approval.granted",
+  "task": "task-370",
+  "action_key": "task-370:chaser:2026-09-19",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "sender": {
+      "channel": "telegram",
+      "id": "5551234567",
+      "hashed": false
+    },
+    "sender_source": "policy"
+  },
+  "alg": "sha256/jcs",
+  "prev": "4341a44ad46ed5c25a601f296530e5cbab7d3bfb6a3119f77a83c327ab5b54d5",
+  "hash": "bcd21fd125d9c85cc4b4eb1ff519448989c72c0fd70305cbb06b821d04926686"
+}

package/schema/fixtures/event/invalid/approval-granted-sender-hashed-raw-id.json

@@ -0,0 +1,20 @@
+{
+  "seq": 93,
+  "ts": "2026-09-19T21:18:55Z",
+  "event": "approval.granted",
+  "task": "task-370",
+  "action_key": "task-370:chaser:2026-09-19",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "sender": {
+      "channel": "telegram",
+      "id": "5551234567",
+      "hashed": true
+    },
+    "sender_source": "policy"
+  },
+  "alg": "sha256/jcs",
+  "prev": "4341a44ad46ed5c25a601f296530e5cbab7d3bfb6a3119f77a83c327ab5b54d5",
+  "hash": "bcd21fd125d9c85cc4b4eb1ff519448989c72c0fd70305cbb06b821d04926686"
+}

package/schema/fixtures/event/invalid/audit-gesture-refused-human-actor.json

@@ -0,0 +1,16 @@
+{
+  "seq": 74,
+  "ts": "2026-09-17T19:02:11Z",
+  "event": "audit.gesture_refused",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "actor": "human:carter",
+    "gesture": "checkpoint-signature",
+    "code": "sender-unmapped",
+    "message": "a record of a refusal authored by either party to it is a record neither party can be held to"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/invalid/audit-gesture-refused-no-actor-no-sender.json

@@ -0,0 +1,15 @@
+{
+  "seq": 74,
+  "ts": "2026-09-17T19:02:11Z",
+  "event": "audit.gesture_refused",
+  "actor": "system:gate",
+  "channel": "telegram",
+  "payload": {
+    "gesture": "review",
+    "code": "sender-unmapped",
+    "message": "a record naming neither the person nor the account it could not name says nothing about who spent the attention"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/invalid/audit-gesture-refused-unknown-gesture.json

@@ -0,0 +1,16 @@
+{
+  "seq": 74,
+  "ts": "2026-09-17T19:02:11Z",
+  "event": "audit.gesture_refused",
+  "actor": "system:gate",
+  "channel": "telegram",
+  "payload": {
+    "actor": "human:carter",
+    "gesture": "policy-attestation",
+    "code": "sender-unmapped",
+    "message": "an attestation tap is a decision and is recorded as one; the gesture vocabulary is closed"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/invalid/audit-question-preempted-agent-actor.json

@@ -0,0 +1,16 @@
+{
+  "seq": 91,
+  "ts": "2026-09-19T16:20:44Z",
+  "event": "audit.question_preempted",
+  "actor": "agent:codex",
+  "payload": {
+    "source": "codex-auto-reviewer",
+    "question": {
+      "id": "item_01H9"
+    },
+    "detail": "a record of an event authored by either party to it is a record neither party can be held to"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/invalid/audit-question-preempted-no-question-id.json

@@ -0,0 +1,16 @@
+{
+  "seq": 91,
+  "ts": "2026-09-19T16:20:44Z",
+  "event": "audit.question_preempted",
+  "actor": "system:gate",
+  "payload": {
+    "source": "codex-auto-reviewer",
+    "question": {
+      "method": "item/autoApprovalReview/completed"
+    },
+    "verdict": "approve"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/invalid/audit-question-preempted-unknown-source.json

@@ -0,0 +1,15 @@
+{
+  "seq": 91,
+  "ts": "2026-09-19T16:20:44Z",
+  "event": "audit.question_preempted",
+  "actor": "system:gate",
+  "payload": {
+    "source": "some-other-reviewer",
+    "question": {
+      "id": "item_01H9"
+    }
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/invalid/gate-path-signed-off-absolute-path.json

@@ -0,0 +1,14 @@
+{
+  "seq": 61,
+  "ts": "2026-09-16T11:42:19Z",
+  "event": "gate.path.signed_off",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "path": "/Users/carter/dev/approval-md/SPEC.md",
+    "sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
+  },
+  "alg": "sha256/jcs",
+  "prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
+  "hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
+}

package/schema/fixtures/event/invalid/gate-path-signed-off-agent-actor.json

@@ -0,0 +1,14 @@
+{
+  "seq": 61,
+  "ts": "2026-09-16T11:42:19Z",
+  "event": "gate.path.signed_off",
+  "actor": "agent:claude-code",
+  "channel": "cli",
+  "payload": {
+    "path": "SPEC.md",
+    "sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
+  },
+  "alg": "sha256/jcs",
+  "prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
+  "hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
+}

package/schema/fixtures/event/invalid/gate-path-signed-off-missing-path.json

@@ -0,0 +1,13 @@
+{
+  "seq": 61,
+  "ts": "2026-09-16T11:42:19Z",
+  "event": "gate.path.signed_off",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
+  },
+  "alg": "sha256/jcs",
+  "prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
+  "hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
+}

package/schema/fixtures/event/valid/approval-granted-sender-hashed.json

@@ -0,0 +1,20 @@
+{
+  "seq": 91,
+  "ts": "2026-09-19T21:14:08Z",
+  "event": "approval.granted",
+  "task": "task-370",
+  "action_key": "task-370:chaser:2026-09-19",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "sender": {
+      "channel": "telegram",
+      "id": "hmac-sha256:3f2a9c11b4d7e6085a1c2f9d8e7b6a5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a",
+      "hashed": true
+    },
+    "sender_source": "policy"
+  },
+  "alg": "sha256/jcs",
+  "prev": "4341a44ad46ed5c25a601f296530e5cbab7d3bfb6a3119f77a83c327ab5b54d5",
+  "hash": "bcd21fd125d9c85cc4b4eb1ff519448989c72c0fd70305cbb06b821d04926686"
+}

package/schema/fixtures/event/valid/audit-gesture-refused-review-note.json

@@ -0,0 +1,21 @@
+{
+  "seq": 75,
+  "ts": "2026-09-17T19:04:38Z",
+  "event": "audit.gesture_refused",
+  "actor": "system:gate",
+  "channel": "telegram",
+  "payload": {
+    "actor": "human:carter",
+    "gesture": "review-note",
+    "code": "policy-not-attested",
+    "sender": {
+      "channel": "telegram",
+      "id": "5559876543"
+    },
+    "sender_source": "policy",
+    "message": "the policy file has changed since it was attested at seq 44607; the sender mapping it declares is not in force, so nothing was recorded"
+  },
+  "alg": "sha256/jcs",
+  "prev": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f",
+  "hash": "8b40e27c5f1a936d04e8b2c6a1d3f5079e2b4c6d8a0f2e4160a8c2e406283bda"
+}

package/schema/fixtures/event/valid/audit-gesture-refused-sender-key-unavailable.json

@@ -0,0 +1,19 @@
+{
+  "seq": 92,
+  "ts": "2026-09-19T21:16:40Z",
+  "event": "audit.gesture_refused",
+  "actor": "system:gate",
+  "channel": "telegram",
+  "payload": {
+    "gesture": "checkpoint-signature",
+    "code": "sender-key-unavailable",
+    "sender": {
+      "channel": "telegram",
+      "id": "5551234567"
+    },
+    "message": "the attested policy maps telegram senders in the keyed form and APPROVAL_SENDER_KEY is unset or empty in this process, so no account on this channel can be resolved and nothing was signed"
+  },
+  "alg": "sha256/jcs",
+  "prev": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f",
+  "hash": "9d4f1b73e0a6c58217f3b9d0e6a4c2815f7b3d9e1a0c6f48273b5d9e0a6c4f81"
+}

package/schema/fixtures/event/valid/audit-gesture-refused.json

@@ -0,0 +1,19 @@
+{
+  "seq": 74,
+  "ts": "2026-09-17T19:02:11Z",
+  "event": "audit.gesture_refused",
+  "actor": "system:gate",
+  "channel": "telegram",
+  "payload": {
+    "gesture": "checkpoint-signature",
+    "code": "sender-unmapped",
+    "sender": {
+      "channel": "telegram",
+      "id": "5551234567"
+    },
+    "message": "the attested policy maps no approver to telegram sender 5551234567, so this checkpoint was not signed and nothing was appended to the chain"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/valid/audit-question-preempted-no-verdict.json

@@ -0,0 +1,16 @@
+{
+  "seq": 92,
+  "ts": "2026-09-19T16:20:45Z",
+  "event": "audit.question_preempted",
+  "actor": "system:gate",
+  "payload": {
+    "source": "codex-auto-reviewer",
+    "question": {
+      "id": "item_01HA",
+      "method": "item/autoApprovalReview/started"
+    }
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/valid/audit-question-preempted.json

@@ -0,0 +1,20 @@
+{
+  "seq": 91,
+  "ts": "2026-09-19T16:20:44Z",
+  "event": "audit.question_preempted",
+  "actor": "system:gate",
+  "payload": {
+    "source": "codex-auto-reviewer",
+    "question": {
+      "id": "item_01H9",
+      "method": "item/autoApprovalReview/completed",
+      "thread": "thread_7f2",
+      "turn": "turn_3"
+    },
+    "verdict": "approve",
+    "detail": "approval codex bridge stopped the session under bridge-auto-reviewer-active"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/valid/gate-path-signed-off.json

@@ -0,0 +1,14 @@
+{
+  "seq": 61,
+  "ts": "2026-09-16T11:42:19Z",
+  "event": "gate.path.signed_off",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "path": "SPEC.md",
+    "sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
+  },
+  "alg": "sha256/jcs",
+  "prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
+  "hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
+}

package/schema/fixtures/event/valid/harness-kind-claude-code.json

@@ -0,0 +1,23 @@
+{
+  "seq": 51,
+  "ts": "2026-09-19T08:14:02Z",
+  "event": "task.registered",
+  "task": "hook:claude-sess-1:toolu-11",
+  "actor": "agent:claude-code",
+  "payload": {
+    "state": "proposed",
+    "actions": [
+      {
+        "class": "deps.add",
+        "summary": "npm install --save-dev oxlint",
+        "idempotency_key": "hook:claude-sess-1:toolu-11:deps.add",
+        "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
+      }
+    ],
+    "harness": "claude-code",
+    "harness_version": "2.0.14 (Claude Code)"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b1cbb27b12bd811a9d197f5fb1c494c191040271901214286f0c10bc84820173",
+  "hash": "129eaa2bad261af1367f963979287653173eba8adce9961f09f08970f38d838f"
+}

package/schema/fixtures/event/valid/harness-kind-codex.json

@@ -0,0 +1,23 @@
+{
+  "seq": 53,
+  "ts": "2026-09-19T08:16:27Z",
+  "event": "task.registered",
+  "task": "hook:codex-sess-1:toolu-13",
+  "actor": "agent:codex",
+  "payload": {
+    "state": "proposed",
+    "actions": [
+      {
+        "class": "deps.add",
+        "summary": "npm install --save-dev oxlint",
+        "idempotency_key": "hook:codex-sess-1:toolu-13:deps.add",
+        "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
+      }
+    ],
+    "harness": "codex",
+    "harness_version": "codex-cli 0.155.0"
+  },
+  "alg": "sha256/jcs",
+  "prev": "2f7c4ab1d0e58936b47c0f1a85d2e6b390c47f1825ad9603be7cd41f5029a8b7",
+  "hash": "83b5e1097cd264af3b0e7195c84fd6a201e73bc94f58026dae1f7c3b950de846"
+}

package/schema/fixtures/event/valid/harness-kind-cursor.json

@@ -0,0 +1,23 @@
+{
+  "seq": 52,
+  "ts": "2026-09-19T08:15:11Z",
+  "event": "task.registered",
+  "task": "hook:cursor-sess-1:toolu-12",
+  "actor": "agent:cursor",
+  "payload": {
+    "state": "proposed",
+    "actions": [
+      {
+        "class": "deps.add",
+        "summary": "npm install --save-dev oxlint",
+        "idempotency_key": "hook:cursor-sess-1:toolu-12:deps.add",
+        "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
+      }
+    ],
+    "harness": "cursor",
+    "harness_version": "cursor-agent 2026.08.19"
+  },
+  "alg": "sha256/jcs",
+  "prev": "129eaa2bad261af1367f963979287653173eba8adce9961f09f08970f38d838f",
+  "hash": "2f7c4ab1d0e58936b47c0f1a85d2e6b390c47f1825ad9603be7cd41f5029a8b7"
+}

package/schema/fixtures/event/valid/harness-kind-grok.json

@@ -0,0 +1,23 @@
+{
+  "seq": 54,
+  "ts": "2026-09-19T08:17:44Z",
+  "event": "task.registered",
+  "task": "hook:grok-sess-1:toolu-14",
+  "actor": "agent:grok",
+  "payload": {
+    "state": "proposed",
+    "actions": [
+      {
+        "class": "deps.add",
+        "summary": "npm install --save-dev oxlint",
+        "idempotency_key": "hook:grok-sess-1:toolu-14:deps.add",
+        "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
+      }
+    ],
+    "harness": "grok",
+    "harness_version": "grok 0.4.2"
+  },
+  "alg": "sha256/jcs",
+  "prev": "83b5e1097cd264af3b0e7195c84fd6a201e73bc94f58026dae1f7c3b950de846",
+  "hash": "c6410d97b28e53fa0716d8c4b93e250fa8d17c6b4093e5ad21fc80b7e5943d1a"
+}

package/schema/fixtures/event/valid/harness-kind-muse.json

@@ -0,0 +1,23 @@
+{
+  "seq": 55,
+  "ts": "2026-09-19T08:18:59Z",
+  "event": "task.registered",
+  "task": "hook:muse-sess-1:toolu-15",
+  "actor": "agent:muse",
+  "payload": {
+    "state": "proposed",
+    "actions": [
+      {
+        "class": "deps.add",
+        "summary": "npm install --save-dev oxlint",
+        "idempotency_key": "hook:muse-sess-1:toolu-15:deps.add",
+        "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
+      }
+    ],
+    "harness": "muse",
+    "harness_version": "muse-bin-1.3.0-R3233.1"
+  },
+  "alg": "sha256/jcs",
+  "prev": "c6410d97b28e53fa0716d8c4b93e250fa8d17c6b4093e5ad21fc80b7e5943d1a",
+  "hash": "7d925ec380b14fa6c05e971b3d4287ac6fb015e93c2a480df6b1e7c05a83942f"
+}

package/schema/fixtures/policy/invalid/senders-half-keyed.json

@@ -0,0 +1,20 @@
+{
+  "version": "0.1",
+  "defaults": {
+    "autonomy": "manual",
+    "channel": "telegram",
+    "approval_ttl": "30m",
+    "on_expiry": "reject"
+  },
+  "approvers": {
+    "carter": {
+      "channels": ["telegram"],
+      "senders": {
+        "telegram": "sha256:3f2a9c11b4d7e6085a1c2f9d8e7b6a5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a"
+      }
+    }
+  },
+  "classes": {
+    "communicate.email.external": { "autonomy": "manual" }
+  }
+}

package/schema/fixtures/policy/valid/canonical.json

@@ -14,7 +14,7 @@
   "classes": {
     "read.*": { "autonomy": "autonomous" },
     "files.write.workspace": { "autonomy": "autonomous" },
-    "calendar.write.own": { "autonomy": "supervised" },
+    "calendar.write.own": { "autonomy": "supervised-retro" },
     "communicate.email.draft": { "autonomy": "autonomous" },
     "communicate.email.external": {
       "autonomy": "manual",

package/schema/fixtures/policy/valid/senders-keyed.json

@@ -0,0 +1,24 @@
+{
+  "version": "0.1",
+  "defaults": {
+    "autonomy": "manual",
+    "channel": "telegram",
+    "approval_ttl": "30m",
+    "on_expiry": "reject"
+  },
+  "approvers": {
+    "carter": {
+      "channels": ["telegram", "cli"],
+      "senders": {
+        "telegram": "hmac-sha256:3f2a9c11b4d7e6085a1c2f9d8e7b6a5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a"
+      }
+    },
+    "dana": {
+      "channels": ["telegram"],
+      "senders": { "telegram": "5551234567" }
+    }
+  },
+  "classes": {
+    "communicate.email.external": { "autonomy": "manual" }
+  }
+}

package/schema/fixtures/policy-md/valid/canonical.md

@@ -19,7 +19,7 @@ approvers:
 classes:
   read.*:                       { autonomy: autonomous }
   files.write.workspace:        { autonomy: autonomous }
-  calendar.write.own:           { autonomy: supervised }
+  calendar.write.own:           { autonomy: supervised-retro }
   communicate.email.draft:      { autonomy: autonomous }
   communicate.email.external:
     autonomy: manual

package/schema/fixtures/policy-md/valid/with-values.md

@@ -19,7 +19,7 @@ approvers:
 classes:
   read.*:                       { autonomy: autonomous }
   files.write.workspace:        { autonomy: autonomous }
-  calendar.write.own:           { autonomy: supervised }
+  calendar.write.own:           { autonomy: supervised-retro }
   communicate.email.draft:      { autonomy: autonomous }
   communicate.email.external:
     autonomy: manual
@@ -55,7 +55,7 @@ The block below is guidance, never policy. Nothing in it grants anything, and
 no part of the runtime reads it to decide.
 
 ```yaml approval-values
-version: 1
+version: "0.2"
 
 love:
   - seeing the real change, not a description of it
@@ -64,16 +64,14 @@ love:
 like:
   - success reported first, caveats after
   - small reviewable commits
+  - honest opinions on the work, including when you think a task is wrong
+  - a journal entry of about five points per milestone
 
 dislike:
   - prose where a command would do
   - being asked to approve something I cannot see
 
-wants:
-  - honest opinions on the work, including when you think a task is wrong
-  - a journal entry of about five points per milestone
-
-responds: "Usually within the hour on the phone; a bare 'ok' means yes and is not curtness."
+communication: "Usually within the hour on the phone; a bare 'ok' means yes and is not curtness."
 ```
 
 Prose again after the block, ignored by both readers.

package/schema/fixtures/values/invalid/class-shaped.json

@@ -1,5 +1,5 @@
 {
-  "version": 1,
+  "version": "0.2",
   "like": ["small reviewable commits"],
   "classes": {
     "message.send": {