approval-md 0.3.0 → 0.4.1

package/schema/fixtures/event/invalid/audit-reviewed-bad-payload-hash.json

@@ -0,0 +1,21 @@
+{
+  "seq": 16,
+  "ts": "2026-08-04T09:26:02Z",
+  "event": "audit.reviewed",
+  "task": "task-049",
+  "action_key": "task-049:archive:2026-08-04",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "subject_seq": 15,
+    "subject_event": "audit.sampled",
+    "reviewed": true,
+    "sampled_subject_hash": "6c1d3f0b9a8e7d6c5b4a39281706f5e4d3c2b1a09f8e7d6c5b4a392817060504",
+    "verdict": "ok",
+    "verdict_source": "explicit",
+    "payload_hash": "6C1D3F0B"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "6752e6617b2b810c1cc0cf09c51678c78891ff6fdfd8bb9399aecbdfca00dd5b"
+}

package/schema/fixtures/event/invalid/audit-reviewed-loved-no-note.json

@@ -7,7 +7,12 @@
   "actor": "human:carter",
   "channel": "cli",
   "payload": {
+    "subject_seq": 15,
+    "subject_event": "audit.sampled",
+    "reviewed": true,
+    "sampled_subject_hash": "6c1d3f0b9a8e7d6c5b4a39281706f5e4d3c2b1a09f8e7d6c5b4a392817060504",
     "verdict": "ok",
+    "verdict_source": "explicit",
     "reaction": "loved"
   },
   "alg": "sha256/jcs",

package/schema/fixtures/event/invalid/audit-reviewed-no-subject-hash.json

@@ -0,0 +1,19 @@
+{
+  "seq": 16,
+  "ts": "2026-08-04T09:26:02Z",
+  "event": "audit.reviewed",
+  "task": "task-049",
+  "action_key": "task-049:archive:2026-08-04",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "subject_seq": 15,
+    "subject_event": "audit.sampled",
+    "reviewed": true,
+    "verdict": "ok",
+    "verdict_source": "explicit"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "6752e6617b2b810c1cc0cf09c51678c78891ff6fdfd8bb9399aecbdfca00dd5b"
+}

package/schema/fixtures/event/invalid/audit-reviewed-no-subject-seq.json

@@ -0,0 +1,19 @@
+{
+  "seq": 16,
+  "ts": "2026-08-04T09:26:02Z",
+  "event": "audit.reviewed",
+  "task": "task-049",
+  "action_key": "task-049:archive:2026-08-04",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "subject_event": "audit.sampled",
+    "reviewed": true,
+    "sampled_subject_hash": "6c1d3f0b9a8e7d6c5b4a39281706f5e4d3c2b1a09f8e7d6c5b4a392817060504",
+    "verdict": "ok",
+    "verdict_source": "explicit"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "6752e6617b2b810c1cc0cf09c51678c78891ff6fdfd8bb9399aecbdfca00dd5b"
+}

package/schema/fixtures/event/invalid/audit-reviewed-no-verdict-source.json

@@ -0,0 +1,19 @@
+{
+  "seq": 16,
+  "ts": "2026-08-04T09:26:02Z",
+  "event": "audit.reviewed",
+  "task": "task-049",
+  "action_key": "task-049:archive:2026-08-04",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "subject_seq": 15,
+    "subject_event": "audit.sampled",
+    "reviewed": true,
+    "sampled_subject_hash": "6c1d3f0b9a8e7d6c5b4a39281706f5e4d3c2b1a09f8e7d6c5b4a392817060504",
+    "verdict": "ok"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "6752e6617b2b810c1cc0cf09c51678c78891ff6fdfd8bb9399aecbdfca00dd5b"
+}

package/schema/fixtures/event/invalid/audit-reviewed-no-verdict.json

@@ -0,0 +1,19 @@
+{
+  "seq": 16,
+  "ts": "2026-08-04T09:26:02Z",
+  "event": "audit.reviewed",
+  "task": "task-049",
+  "action_key": "task-049:archive:2026-08-04",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "subject_seq": 15,
+    "subject_event": "audit.sampled",
+    "reviewed": true,
+    "sampled_subject_hash": "6c1d3f0b9a8e7d6c5b4a39281706f5e4d3c2b1a09f8e7d6c5b4a392817060504",
+    "verdict_source": "explicit"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "6752e6617b2b810c1cc0cf09c51678c78891ff6fdfd8bb9399aecbdfca00dd5b"
+}

package/schema/fixtures/event/invalid/audit-reviewed-system-actor.json

@@ -7,7 +7,12 @@
   "actor": "system:daemon",
   "channel": "cli",
   "payload": {
-    "verdict": "ok"
+    "subject_seq": 15,
+    "subject_event": "audit.sampled",
+    "reviewed": true,
+    "sampled_subject_hash": "6c1d3f0b9a8e7d6c5b4a39281706f5e4d3c2b1a09f8e7d6c5b4a392817060504",
+    "verdict": "ok",
+    "verdict_source": "explicit"
   },
   "alg": "sha256/jcs",
   "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",

package/schema/fixtures/event/invalid/audit-sampled-no-policy-hash.json

@@ -0,0 +1,14 @@
+{
+  "seq": 15,
+  "ts": "2026-08-04T09:25:02Z",
+  "event": "audit.sampled",
+  "task": "task-049",
+  "action_key": "task-049:archive:2026-08-04",
+  "actor": "system:auditor",
+  "payload": {
+    "rate": 0.1
+  },
+  "alg": "sha256/jcs",
+  "prev": "07453feb30c2b0b1a2806398cdd17b38d98f9abf52b8a75ca42878c9101d8264",
+  "hash": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30"
+}

package/schema/fixtures/event/invalid/daemon-id-malformed.json

@@ -0,0 +1,15 @@
+{
+  "seq": 63,
+  "ts": "2026-09-20T11:06:02Z",
+  "event": "audit.sampled",
+  "task": "task-311",
+  "action_key": "task-311:digest:2026-09-20",
+  "actor": "system:auditor",
+  "daemon": "Village Goa 1\nrate: 1.0",
+  "payload": {
+    "rate": 0.1
+  },
+  "alg": "sha256/jcs",
+  "prev": "07453feb30c2b0b1a2806398cdd17b38d98f9abf52b8a75ca42878c9101d8264",
+  "hash": "9d4c0be1a7fb25308c6ef4a1d0b39724ce85f16a2b0d7c39e8145af62b0c73d8"
+}

package/schema/fixtures/event/invalid/execution-started-truncated-policy-sha256.json

@@ -0,0 +1,18 @@
+{
+  "seq": 9,
+  "ts": "2026-10-04T09:19:02Z",
+  "event": "execution.started",
+  "task": "hook:sess-1:tu-1",
+  "action_key": "hook:sess-1:tu-1:files.write.workspace",
+  "actor": "agent:claude-code",
+  "payload": {
+    "class": "files.write.workspace",
+    "est_cost_usd": "0",
+    "execution": "harness",
+    "payload_hash": "9f2b1c4d5e6f708192a3b4c5d6e7f8091a2b3c4d5e6f708192a3b4c5d6e7f809",
+    "policy_sha256": "5f1c0de9a3b7"
+  },
+  "alg": "sha256/jcs",
+  "prev": "d973375d6aeec5e6cd2de3a0f7dc8f5bc1d9be77225f9af0f851e7fc519a07c3",
+  "hash": "707b79cfa14ec43224c8f71a4fee3ddbff52369f82525aab19bec18c369d5cad"
+}

package/schema/fixtures/event/invalid/harness-cap-at-margin.json

@@ -0,0 +1,16 @@
+{
+  "seq": 76,
+  "ts": "2026-09-22T08:34:20Z",
+  "event": "approval.requested",
+  "task": "hook:hermes-sess-1:tool-12",
+  "action_key": "hook:hermes-sess-1:tool-12:deps.add",
+  "actor": "agent:hermes",
+  "payload": {
+    "class": "deps.add",
+    "execution": "harness",
+    "harness_cap_ms": 60000
+  },
+  "alg": "sha256/jcs",
+  "prev": "1515151515151515151515151515151515151515151515151515151515151515",
+  "hash": "1616161616161616161616161616161616161616161616161616161616161616"
+}

package/schema/fixtures/event/invalid/harness-cap-fractional.json

@@ -0,0 +1,16 @@
+{
+  "seq": 74,
+  "ts": "2026-09-22T08:33:19Z",
+  "event": "approval.requested",
+  "task": "hook:hermes-sess-1:tool-10",
+  "action_key": "hook:hermes-sess-1:tool-10:deps.add",
+  "actor": "agent:hermes",
+  "payload": {
+    "class": "deps.add",
+    "execution": "harness",
+    "harness_cap_ms": 299999.5
+  },
+  "alg": "sha256/jcs",
+  "prev": "1313131313131313131313131313131313131313131313131313131313131313",
+  "hash": "1414141414141414141414141414141414141414141414141414141414141414"
+}

package/schema/fixtures/event/invalid/harness-cap-negative.json

@@ -0,0 +1,16 @@
+{
+  "seq": 73,
+  "ts": "2026-09-22T08:32:44Z",
+  "event": "approval.requested",
+  "task": "hook:hermes-sess-1:tool-9",
+  "action_key": "hook:hermes-sess-1:tool-9:deps.add",
+  "actor": "agent:hermes",
+  "payload": {
+    "class": "deps.add",
+    "execution": "harness",
+    "harness_cap_ms": -300000
+  },
+  "alg": "sha256/jcs",
+  "prev": "1212121212121212121212121212121212121212121212121212121212121212",
+  "hash": "1313131313131313131313131313131313131313131313131313131313131313"
+}

package/schema/fixtures/event/invalid/harness-cap-string.json

@@ -0,0 +1,16 @@
+{
+  "seq": 75,
+  "ts": "2026-09-22T08:33:52Z",
+  "event": "approval.requested",
+  "task": "hook:hermes-sess-1:tool-11",
+  "action_key": "hook:hermes-sess-1:tool-11:deps.add",
+  "actor": "agent:hermes",
+  "payload": {
+    "class": "deps.add",
+    "execution": "harness",
+    "harness_cap_ms": "300s"
+  },
+  "alg": "sha256/jcs",
+  "prev": "1414141414141414141414141414141414141414141414141414141414141414",
+  "hash": "1515151515151515151515151515151515151515151515151515151515151515"
+}

package/schema/fixtures/event/invalid/harness-cap-without-harness-execution.json

@@ -0,0 +1,16 @@
+{
+  "seq": 77,
+  "ts": "2026-09-22T08:34:51Z",
+  "event": "approval.requested",
+  "task": "hook:hermes-sess-1:tool-13",
+  "action_key": "hook:hermes-sess-1:tool-13:deps.add",
+  "actor": "agent:hermes",
+  "payload": {
+    "class": "deps.add",
+    "harness_cap_ms": 300000,
+    "payload_hash": "5f1c2a6f3e9d4b8a7c0e1d2b3a4958677889aabbccddeeff0011223344556677"
+  },
+  "alg": "sha256/jcs",
+  "prev": "1616161616161616161616161616161616161616161616161616161616161616",
+  "hash": "1717171717171717171717171717171717171717171717171717171717171717"
+}

package/schema/fixtures/event/invalid/harness-cap-zero.json

@@ -0,0 +1,16 @@
+{
+  "seq": 72,
+  "ts": "2026-09-22T08:32:01Z",
+  "event": "approval.requested",
+  "task": "hook:hermes-sess-1:tool-8",
+  "action_key": "hook:hermes-sess-1:tool-8:deps.add",
+  "actor": "agent:hermes",
+  "payload": {
+    "class": "deps.add",
+    "execution": "harness",
+    "harness_cap_ms": 0
+  },
+  "alg": "sha256/jcs",
+  "prev": "1111111111111111111111111111111111111111111111111111111111111111",
+  "hash": "1212121212121212121212121212121212121212121212121212121212121212"
+}

package/schema/fixtures/event/valid/approval-requested-harness-cap.json

@@ -0,0 +1,18 @@
+{
+  "seq": 71,
+  "ts": "2026-09-22T08:31:14Z",
+  "event": "approval.requested",
+  "task": "hook:hermes-sess-1:tool-7",
+  "action_key": "hook:hermes-sess-1:tool-7:deps.add",
+  "actor": "agent:hermes",
+  "channel": "telegram",
+  "payload": {
+    "class": "deps.add",
+    "execution": "harness",
+    "harness_cap_ms": 300000,
+    "payload_hash": "5f1c2a6f3e9d4b8a7c0e1d2b3a4958677889aabbccddeeff0011223344556677"
+  },
+  "alg": "sha256/jcs",
+  "prev": "1010101010101010101010101010101010101010101010101010101010101010",
+  "hash": "1111111111111111111111111111111111111111111111111111111111111111"
+}

package/schema/fixtures/event/valid/audit-lock-reclaimed-implausible-created.json

@@ -0,0 +1,18 @@
+{
+  "seq": 216,
+  "ts": "2026-10-05T07:41:12.408Z",
+  "event": "audit.lock_reclaimed",
+  "actor": "system:log",
+  "payload": {
+    "lockfile": "events.jsonl.lock",
+    "reason": "holder-dead",
+    "holder": {
+      "pid": 48213,
+      "op": "append",
+      "created": null
+    }
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/valid/audit-lock-reclaimed-legacy.json

@@ -0,0 +1,14 @@
+{
+  "seq": 215,
+  "ts": "2026-10-05T07:52:03.010Z",
+  "event": "audit.lock_reclaimed",
+  "actor": "system:log",
+  "payload": {
+    "lockfile": "events.jsonl.lock",
+    "reason": "legacy-aged",
+    "age_ms": 612000
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/valid/audit-lock-reclaimed-unlock.json

@@ -0,0 +1,19 @@
+{
+  "seq": 216,
+  "ts": "2026-10-05T11:02:40.115Z",
+  "event": "audit.lock_reclaimed",
+  "actor": "human:carter",
+  "payload": {
+    "lockfile": "events.jsonl.lock",
+    "reason": "operator-cleared",
+    "age_ms": 4021877,
+    "holder": {
+      "pid": 31,
+      "op": "append",
+      "created": "2026-10-05T09:55:38.238Z"
+    }
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/valid/audit-lock-reclaimed.json

@@ -0,0 +1,19 @@
+{
+  "seq": 214,
+  "ts": "2026-10-05T07:41:12.408Z",
+  "event": "audit.lock_reclaimed",
+  "actor": "system:log",
+  "payload": {
+    "lockfile": "events.jsonl.lock",
+    "reason": "holder-dead",
+    "age_ms": 734211,
+    "holder": {
+      "pid": 48213,
+      "op": "append",
+      "created": "2026-10-05T07:28:58.197Z"
+    }
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
+}

package/schema/fixtures/event/valid/audit-reviewed-reaction.json

@@ -7,7 +7,12 @@
   "actor": "human:carter",
   "channel": "cli",
   "payload": {
+    "subject_seq": 15,
+    "subject_event": "audit.sampled",
+    "reviewed": true,
+    "sampled_subject_hash": "6c1d3f0b9a8e7d6c5b4a39281706f5e4d3c2b1a09f8e7d6c5b4a392817060504",
     "verdict": "ok",
+    "verdict_source": "explicit",
     "reaction": "loved",
     "note": "exactly the archive I would have written by hand"
   },

package/schema/fixtures/event/valid/audit-reviewed.json

@@ -7,7 +7,12 @@
   "actor": "human:carter",
   "channel": "cli",
   "payload": {
-    "verdict": "ok"
+    "subject_seq": 15,
+    "subject_event": "audit.sampled",
+    "reviewed": true,
+    "sampled_subject_hash": "6c1d3f0b9a8e7d6c5b4a39281706f5e4d3c2b1a09f8e7d6c5b4a392817060504",
+    "verdict": "ok",
+    "verdict_source": "explicit"
   },
   "alg": "sha256/jcs",
   "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",

package/schema/fixtures/event/valid/audit-sampled.json

@@ -6,7 +6,8 @@
   "action_key": "task-049:archive:2026-08-04",
   "actor": "system:auditor",
   "payload": {
-    "rate": 0.1
+    "rate": 0.1,
+    "policy_sha256": "3b1f0c9d8e7a6b5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a8b7c6d5e4f3a2b1c"
   },
   "alg": "sha256/jcs",
   "prev": "07453feb30c2b0b1a2806398cdd17b38d98f9abf52b8a75ca42878c9101d8264",

package/schema/fixtures/event/valid/daemon-identity-declared.json

@@ -0,0 +1,17 @@
+{
+  "seq": 62,
+  "ts": "2026-09-20T11:05:44Z",
+  "event": "envelope.drift",
+  "task": "task-311",
+  "actor": "system:daemon",
+  "daemon": "village-goa-1",
+  "payload": {
+    "file": "backlog/tasks/task-311.md",
+    "declared_state": "requested",
+    "derived_state": "granted",
+    "reason": "state-mismatch"
+  },
+  "alg": "sha256/jcs",
+  "prev": "c0a1dd6b0f5a9b7fe7cf7d90cbb4aa4cf0a1eb2d5c7318cbbbd7a2b9efc33150",
+  "hash": "5b2f0c8419a7dd3e6f0b4a1c93de8027f5cbb1a40de92f7c3ab6051d8e4f29c7"
+}

package/schema/fixtures/event/valid/daemon-identity.json

@@ -0,0 +1,16 @@
+{
+  "seq": 61,
+  "ts": "2026-09-20T11:04:19Z",
+  "event": "audit.sampled",
+  "task": "task-311",
+  "action_key": "task-311:digest:2026-09-20",
+  "actor": "system:auditor",
+  "daemon": "daemon-3f2a9c11",
+  "payload": {
+    "rate": 0.1,
+    "policy_sha256": "3b1f0c9d8e7a6b5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a8b7c6d5e4f3a2b1c"
+  },
+  "alg": "sha256/jcs",
+  "prev": "07453feb30c2b0b1a2806398cdd17b38d98f9abf52b8a75ca42878c9101d8264",
+  "hash": "c0a1dd6b0f5a9b7fe7cf7d90cbb4aa4cf0a1eb2d5c7318cbbbd7a2b9efc33150"
+}

package/schema/fixtures/event/valid/execution-started-policy-sha256.json

@@ -0,0 +1,18 @@
+{
+  "seq": 9,
+  "ts": "2026-10-04T09:19:02Z",
+  "event": "execution.started",
+  "task": "hook:sess-1:tu-1",
+  "action_key": "hook:sess-1:tu-1:files.write.workspace",
+  "actor": "agent:claude-code",
+  "payload": {
+    "class": "files.write.workspace",
+    "est_cost_usd": "0",
+    "execution": "harness",
+    "payload_hash": "9f2b1c4d5e6f708192a3b4c5d6e7f8091a2b3c4d5e6f708192a3b4c5d6e7f809",
+    "policy_sha256": "5f1c0de9a3b7e2d4c6f8091a2b3c4d5e6f708192a3b4c5d6e7f8091a2b3c4d5e"
+  },
+  "alg": "sha256/jcs",
+  "prev": "d973375d6aeec5e6cd2de3a0f7dc8f5bc1d9be77225f9af0f851e7fc519a07c3",
+  "hash": "707b79cfa14ec43224c8f71a4fee3ddbff52369f82525aab19bec18c369d5cad"
+}

package/schema/fixtures/event/valid/harness-kind-hermes.json

@@ -0,0 +1,23 @@
+{
+  "seq": 56,
+  "ts": "2026-09-20T09:41:12Z",
+  "event": "task.registered",
+  "task": "hook:hermes-sess-1:toolu-16",
+  "actor": "agent:hermes",
+  "payload": {
+    "state": "proposed",
+    "actions": [
+      {
+        "class": "deps.add",
+        "summary": "npm install --save-dev oxlint",
+        "idempotency_key": "hook:hermes-sess-1:toolu-16:deps.add",
+        "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
+      }
+    ],
+    "harness": "hermes",
+    "harness_version": "hermes 0.21.3"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7d925ec380b14fa6c05e971b3d4287ac6fb015e93c2a480df6b1e7c05a83942f",
+  "hash": "e1f6a30c4d7b92815ac0fe43b6d258907cb14fe2839a5d07f4cb62e1a9350b7d"
+}

package/schema/fixtures/policy/invalid/daemons-malformed-id.json

@@ -0,0 +1,10 @@
+{
+  "version": "0.1",
+  "defaults": {
+    "autonomy": "manual"
+  },
+  "daemons": ["Village-Goa-1"],
+  "classes": {
+    "communicate.email.external": { "autonomy": "manual" }
+  }
+}

package/schema/fixtures/policy/valid/daemons-allowlist.json

@@ -0,0 +1,19 @@
+{
+  "version": "0.1",
+  "defaults": {
+    "autonomy": "manual",
+    "channel": "telegram",
+    "approval_ttl": "30m",
+    "on_expiry": "reject"
+  },
+  "approvers": {
+    "carter": {
+      "channels": ["telegram", "cli"],
+      "senders": { "telegram": "5551234567" }
+    }
+  },
+  "daemons": ["daemon-3f2a9c11", "village-goa-1"],
+  "classes": {
+    "communicate.email.external": { "autonomy": "manual" }
+  }
+}

package/schema/fixtures/policy-md/invalid/schema-invalid-agent-may-request.md

@@ -0,0 +1,21 @@
+# Approval Policy
+
+Two invalid spellings of `agent_may_request` (APRV-445): a string where a
+boolean belongs, and `true` on a `human-only` rule, which is inert to agents
+and may not be opened to them. Either alone fails the whole policy closed:
+`schema-invalid`.
+
+```yaml approval-policy
+version: "0.1"
+
+defaults:
+  autonomy: manual
+
+classes:
+  intent.publish.inferred.index:
+    autonomy: manual
+    agent_may_request: "yes"
+  account.credential:
+    autonomy: human-only
+    agent_may_request: true
+```

package/schema/fixtures/policy-md/valid/agent-may-request.md

@@ -0,0 +1,24 @@
+# Approval Policy
+
+`agent_may_request` (APRV-445) opens `approval propose` to classes the operator
+declares by name. The family line opens the branch; each member is still a line
+of its own, and the closed member says no for itself.
+
+```yaml approval-policy
+version: "0.1"
+
+defaults:
+  autonomy: manual
+  approval_ttl: 72h
+
+classes:
+  intent.publish.*:
+    autonomy: manual
+    agent_may_request: true
+  intent.publish.inferred.index: { autonomy: manual }
+  intent.publish.stated.index: { autonomy: autonomous }
+  intent.publish.closed:
+    autonomy: manual
+    agent_may_request: false
+  communicate.email.external: { autonomy: manual }
+```