aegis-devops 0.1.0__py3-none-any.whl

aegis_core/__init__.py

@@ -0,0 +1,7 @@
+"""Aegis: provenance-backed, authority-aware policy verification for the
+infrastructure actions of AI agents.
+
+See the README for what this does and, importantly, what it does not yet do.
+"""
+
+__version__ = "0.1.0"

aegis_core/_examples/authority.example.yaml

@@ -0,0 +1,12 @@
+# Which principal may assert which class of constraint.
+# Loaded via aegis_core.authority.load_authority_map(path).
+principals:
+  admin:
+    - scaling
+    - deletion
+    - configuration
+  sre_lead:
+    - scaling
+    - configuration
+  developer:
+    - configuration

aegis_core/_examples/authority.example.yaml.sig

@@ -0,0 +1,2 @@
+aegis-sig-v1
+4161e875ae0aad3c1b3c2335b98d6aebd4d86178db653d08e9057e6f34fed071

aegis_core/_examples/constraints.example.yaml

@@ -0,0 +1,338 @@
+constraints:
+- id: no-scale-prod-peak
+  provider: kubernetes
+  resource_pattern: deployment/*
+  actions:
+  - scale
+  scope:
+    namespace: prod
+  time_window:
+    days:
+    - Mon
+    - Tue
+    - Wed
+    - Thu
+    - Fri
+    start: 09:00
+    end: '17:00'
+    tz: America/New_York
+  effect: BLOCK
+  constraint_class: scaling
+  principal: sre_lead
+  source_ref: jira-1001
+  source_timestamp: '2026-01-15T09:00:00+00:00'
+  rule_text: Do not scale deployments in prod during business hours (09:00-17:00 ET,
+    weekdays).
+  provenance_hash: f3af697890dc757effcf13cdfcc9e4624e32aa65dd3114c348674ddcda0f2244
+- id: no-delete-nodes
+  provider: kubernetes
+  resource_pattern: node/*
+  actions:
+  - delete
+  scope: {}
+  time_window: null
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: git-abc123
+  source_timestamp: '2026-02-01T12:00:00+00:00'
+  rule_text: Never delete cluster nodes directly; drain and cordon through the runbook
+    instead.
+  provenance_hash: fd5a01ddabc24b1203b65dd2503be114d88d5de909b2bb1ca41ecbd2e02d078a
+- id: escalate-terraform-prod-destroy
+  provider: terraform
+  resource_pattern: aws_instance.*
+  actions:
+  - delete
+  - replace
+  scope:
+    region: us-east-1
+  time_window: null
+  effect: ESCALATE
+  constraint_class: deletion
+  principal: admin
+  source_ref: slack-perma-1
+  source_timestamp: '2026-02-10T18:30:00+00:00'
+  rule_text: Escalate any destructive terraform change to prod EC2 instances in us-east-1
+    for human review.
+  provenance_hash: 6d366d7ed1a8abbcc4e2979cbfe54fc0d2414f75ca1728ddbe4e689d3e8e23c7
+- id: escalate-configmap-changes
+  provider: kubernetes
+  resource_pattern: configmap/*
+  actions:
+  - delete
+  - update
+  scope: {}
+  time_window: null
+  effect: ESCALATE
+  constraint_class: configuration
+  principal: developer
+  source_ref: jira-1002
+  source_timestamp: '2026-03-01T08:00:00+00:00'
+  rule_text: Escalate configmap changes for review before they are applied.
+  provenance_hash: 3dcb8a4cbe56e36e338a8db7ac50ef9436e9314a8be49d1c914abb148c5a23dd
+- id: no-direct-asg-changes
+  provider: terraform
+  resource_pattern: aws_autoscaling_group.*
+  actions:
+  - update
+  scope: {}
+  time_window: null
+  effect: BLOCK
+  constraint_class: scaling
+  principal: admin
+  source_ref: git-bcd234
+  source_timestamp: '2026-03-05T14:00:00+00:00'
+  rule_text: Block direct terraform changes to autoscaling groups; use the scaling
+    API instead.
+  provenance_hash: afa75ac708a069a8b6f7c7594f46719a450dcaf7818c29090099bd1e80b4deb6
+- id: aws-no-delete-ec2-us-east-1
+  provider: aws
+  resource_pattern: ec2/instance/*
+  actions:
+  - delete
+  scope:
+    region: us-east-1
+  time_window: null
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: jira-2001
+  source_timestamp: '2026-03-10T09:00:00+00:00'
+  rule_text: Block deleting EC2 instances in us-east-1; terminate through the runbook
+    instead.
+  provenance_hash: b7e90e442b18df6b94af766bc3b881bf4a4c50341a1df770ab004b024fb6c5a1
+- id: azure-escalate-aks-scale-delete
+  provider: azure
+  resource_pattern: aks/cluster/*
+  actions:
+  - delete
+  - scale
+  scope: {}
+  time_window: null
+  effect: ESCALATE
+  constraint_class: scaling
+  principal: sre_lead
+  source_ref: git-def456
+  source_timestamp: '2026-03-12T11:00:00+00:00'
+  rule_text: Escalate scaling or deleting AKS clusters for human review.
+  provenance_hash: 8281e310fb3d5cc7b4a4041de2e8c62cc97e93eacb00f74e416f8fc9625acf6a
+- id: gcp-no-delete-sql-instance
+  provider: gcp
+  resource_pattern: sql/instance/*
+  actions:
+  - delete
+  scope: {}
+  time_window: null
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: jira-2002
+  source_timestamp: '2026-03-14T13:00:00+00:00'
+  rule_text: Block deleting Cloud SQL instances directly; use the decommission runbook
+    instead.
+  provenance_hash: 597d1cc37a6e19d8508ede3c762ad2be3afb384a50a603c2df34d263712cfd7b
+- id: no-delete-in-prod-env
+  provider: kubernetes
+  resource_pattern: '*'
+  actions:
+  - delete
+  scope:
+    env: prod
+  time_window: null
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: git-789abc
+  source_timestamp: '2026-03-18T10:00:00+00:00'
+  rule_text: Block deleting any resource in a production environment, regardless of
+    kind; only the runbook may delete in prod.
+  provenance_hash: 4c9c7f43f3d7e404ce0f9d4fc50cae305473aae9ee176f99028096754e042c72
+- id: no-delete-in-prod-namespace
+  provider: kubernetes
+  resource_pattern: '*'
+  actions:
+  - delete
+  scope:
+    namespace: prod
+  time_window: null
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: jira-3004
+  source_timestamp: '2026-03-21T09:00:00+00:00'
+  rule_text: Block deleting any resource in the prod namespace (including deleting
+    the namespace itself, which cascades to everything in it); only the runbook may
+    delete in prod.
+  provenance_hash: f113e23d4a503ef45fbab68655f41d8cf434f1dbcf16f0fb646e5636bedb30e0
+- id: helm-block-release-delete-prod
+  provider: helm
+  resource_pattern: release/*
+  actions:
+  - delete
+  scope:
+    namespace: prod
+  time_window: null
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: jira-3001
+  source_timestamp: '2026-03-20T09:00:00+00:00'
+  rule_text: Block deleting Helm releases in the prod namespace; use the decommission
+    runbook instead.
+  provenance_hash: 95a7e5c38de10083ba86e99ac6b75d9e18bfbf148710e6a037bdc7c438b84bf7
+- id: argocd-escalate-prod-sync-prune
+  provider: argocd
+  resource_pattern: app/prod-*
+  actions:
+  - sync
+  scope:
+    prune: true
+  time_window: null
+  effect: ESCALATE
+  constraint_class: configuration
+  principal: sre_lead
+  source_ref: jira-3003
+  source_timestamp: '2026-03-20T09:30:00+00:00'
+  rule_text: Escalate ArgoCD syncs of prod applications with --prune for human review.
+  provenance_hash: d2f69433e0f103545173689e92f40ef40e29ad8fb35b55eea735775b7fd880d0
+- id: git-block-force-push-main
+  provider: git
+  resource_pattern: ref/main
+  actions:
+  - push
+  scope:
+    force: true
+  time_window: null
+  effect: BLOCK
+  constraint_class: configuration
+  principal: sre_lead
+  source_ref: git-4001
+  source_timestamp: '2026-03-20T10:00:00+00:00'
+  rule_text: Block force-pushing to main; history rewrites on the shared branch are
+    never allowed.
+  provenance_hash: cc77094b73548458a4d8bade2ed7ac1c300ee196345f82b2c88a4d98f867f4f7
+- id: github-escalate-deploy-prod-workflow
+  provider: github
+  resource_pattern: workflow/deploy-prod*
+  actions:
+  - run
+  scope: {}
+  time_window: null
+  effect: ESCALATE
+  constraint_class: configuration
+  principal: sre_lead
+  source_ref: jira-3002
+  source_timestamp: '2026-03-20T10:30:00+00:00'
+  rule_text: Escalate manual runs of production deploy workflows for human review.
+  provenance_hash: c87ecc926787c75fcc985db7048d28b5e4c50da424507b87c438f4b459ded138
+- id: sql-block-unbounded-table-delete
+  provider: sql
+  resource_pattern: table/*
+  actions:
+  - delete
+  scope:
+    unbounded: true
+  time_window: null
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: jira-5001
+  source_timestamp: '2026-04-01T09:00:00+00:00'
+  rule_text: Block unbounded DELETE statements against any table (a DELETE with no
+    WHERE clause).
+  provenance_hash: b2304cd54c4f67fddd275587f98b5406b5af5afa58428227c37fddcf61be69bb
+- id: sql-block-database-delete
+  provider: sql
+  resource_pattern: database/*
+  actions:
+  - delete
+  scope: {}
+  time_window: null
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: jira-5002
+  source_timestamp: '2026-04-01T09:05:00+00:00'
+  rule_text: Block DROP DATABASE / DROP SCHEMA statements outright.
+  provenance_hash: 3498aef6f346c9f3ea59f8971a329fe362e6da153bf31d9cf9acf515061a8ca3
+- id: sql-escalate-table-ddl-drop-column
+  provider: sql
+  resource_pattern: table/*
+  actions:
+  - update
+  scope:
+    ddl: true
+    drop_column: true
+  time_window: null
+  effect: ESCALATE
+  constraint_class: configuration
+  principal: sre_lead
+  source_ref: jira-5003
+  source_timestamp: '2026-04-01T09:10:00+00:00'
+  rule_text: Escalate ALTER TABLE ... DROP COLUMN statements for human review before
+    they run.
+  provenance_hash: 79d35ee558eff46c3c80110dd492d066b1365030930885a4b5b6e91de839363f
+- id: mongodb-block-unbounded-collection-delete
+  provider: mongodb
+  resource_pattern: collection/*
+  actions:
+  - delete
+  scope:
+    unbounded: true
+  time_window: null
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: jira-5004
+  source_timestamp: '2026-04-01T09:15:00+00:00'
+  rule_text: Block unbounded deleteMany/remove calls against any Mongo collection
+    (an empty filter matches everything).
+  provenance_hash: bfcd815f7a5d20cb3449cf469faa903c73e07a804f42def4749e8d1ba19cb7cb
+- id: pulumi-escalate-rds-delete-replace
+  provider: pulumi
+  resource_pattern: aws/rds/*
+  actions:
+  - delete
+  - replace
+  scope: {}
+  time_window: null
+  effect: ESCALATE
+  constraint_class: deletion
+  principal: admin
+  source_ref: plan-5005
+  source_timestamp: '2026-04-01T09:20:00+00:00'
+  rule_text: Escalate any Pulumi delete or replace of an RDS resource for human review
+    before applying.
+  provenance_hash: d36290c432cb1f37323361b5d19a34e00a5e6ef588f566b9f4ccad23f0d72b4b
+- id: migration-block-database-delete
+  provider: migration
+  resource_pattern: database/*
+  actions:
+  - delete
+  scope: {}
+  time_window: null
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: jira-5006
+  source_timestamp: '2026-04-01T09:25:00+00:00'
+  rule_text: Block database-wiping migration commands (flyway clean, rails db:drop/db:reset,
+    prisma migrate reset) outright.
+  provenance_hash: ebddf9666f7df5ce6ccd0a4cd9b1de5ae67cbbe12477b2559701aa0bf83cda2e
+- id: helm-block-release-delete-prod-env
+  provider: helm
+  resource_pattern: release/*
+  actions:
+  - delete
+  scope:
+    env: prod
+  time_window: null
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: jira-3005
+  source_timestamp: '2026-03-20T09:15:00+00:00'
+  rule_text: Block deleting Helm releases in any production environment (resolved
+    from the kube context), whatever the namespace; use the decommission runbook instead.
+  provenance_hash: 747653b3b34300a18e4773a0784706fcb0147fb10507e88ce93f2fb5cdcd4df8

aegis_core/_examples/constraints.example.yaml.sig

@@ -0,0 +1,2 @@
+aegis-sig-v1
+7e09f759826ff0d14a71462078572ed32a1d5ce793844ca03c6ae7d8f2e524b1

aegis_core/_examples/environments.example.yaml

@@ -0,0 +1,51 @@
+# Maps provider-specific identifiers (kube context/cluster, AWS account/
+# profile, GCP project, Azure subscription/resource group) to a normalised
+# env: prod | staging | dev. Loaded via aegis_core.environments.load_environment_map(path).
+#
+# Fail-safe: an identifier that isn't listed here resolves to no env at all
+# (never a default like "dev") -- see aegis_core/environments.py.
+environments:
+  kubernetes:
+    contexts:
+      prod-us-east: prod
+      staging: staging
+      kind-local: dev
+    clusters:
+      gke_acme_us-east1_prod: prod
+    # KUBECONFIG=/path kubectl ... / helm --kubeconfig: the file path itself
+    # names the cluster when no --context is given.
+    kubeconfigs:
+      /etc/kubernetes/prod.kubeconfig: prod
+      ~/.kube/staging.config: staging
+  aws:
+    accounts:
+      "123456789012": prod
+      "210987654321": staging
+    profiles:
+      prod-admin: prod
+      staging: staging
+  gcp:
+    projects:
+      acme-prod: prod
+      acme-staging: staging
+  azure:
+    subscriptions:
+      "11111111-1111-1111-1111-111111111111": prod
+    resource_groups:
+      rg-prod: prod
+      rg1: staging
+  github:
+    # gh -R/--repo owner/repo (or a repo URL in the argv).
+    repos:
+      acme/shop: prod
+      acme/shop-staging: staging
+  argocd:
+    # Globs on the ArgoCD application name; first match wins.
+    apps:
+      "prod-*": prod
+      "staging-*": staging
+  terraform:
+    # terraform/tofu workspace (metadata.workspace) when a plan carries one.
+    workspaces:
+      prod: prod
+      staging: staging

aegis_core/_examples/environments.example.yaml.sig

@@ -0,0 +1,2 @@
+aegis-sig-v1
+8a136981b6a6feb3aba87ac6f39ad68a732d7a1bb4be14e377a5cf2f91b2549b

aegis_core/_examples/example-signing.key

@@ -0,0 +1,7 @@
+# EXAMPLE SIGNING KEY -- PUBLIC, FOR DEMOS AND TESTS ONLY.
+# This key is committed to the repository so that the shipped example and
+# corpus files carry verifiable .sig files out of the box. Anyone with it
+# can forge policy files; generate your own for real use, e.g.
+#   python -c 'import secrets; print(secrets.token_hex(32))' > aegis-signing.key
+# and load it with --key file:aegis-signing.key or --key env:AEGIS_SIGNING_KEY.
+a3e15c0f9b7d42e6c8a1f04d7b2e9c5361d8f0a4b7c2e5d19f3a6c8e0b4d7f21

aegis_core/_examples/plan_constraints.example.yaml

@@ -0,0 +1,76 @@
+plan_constraints:
+- id: plan-max-25-resources
+  provider: terraform
+  effect: ESCALATE
+  constraint_class: configuration
+  principal: sre_lead
+  source_ref: plan-1001
+  source_timestamp: '2026-04-01T09:00:00+00:00'
+  rule_text: Escalate any terraform plan that touches more than 25 resources for human
+    review.
+  provenance_hash: 31660a4ae4fc93b4afb3e45637829282dfe77f777d0fff4cbabef37c08adb038
+  max_intents: 25
+  max_matching: null
+  requires_all: null
+  forbid_together: null
+  ratio: null
+- id: plan-no-db-deletes
+  provider: terraform
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: plan-1002
+  source_timestamp: '2026-04-02T09:00:00+00:00'
+  rule_text: Block any terraform plan that deletes or replaces an aws_db_instance.
+  provenance_hash: 72c17fbb6eaab0de412a42a0bdefa0db28985c5f6c1f197770124744d28cfe09
+  max_intents: null
+  max_matching:
+    actions:
+    - delete
+    - replace
+    resource_pattern: aws_db_instance.*
+    max: 0
+  requires_all: null
+  forbid_together: null
+  ratio: null
+- id: plan-no-delete-and-create-us-east-1
+  provider: terraform
+  effect: BLOCK
+  constraint_class: deletion
+  principal: admin
+  source_ref: plan-1003
+  source_timestamp: '2026-04-03T09:00:00+00:00'
+  rule_text: Block a terraform plan that both deletes resources in us-east-1 and creates
+    resources anywhere; split the change into separate plans for review.
+  provenance_hash: cbdaa3e708a9d43ed70c3fde4c0825dd1bd0797ad3bebddf0175d05a3a5cc469
+  max_intents: null
+  max_matching: null
+  requires_all: null
+  forbid_together:
+  - actions:
+    - delete
+    scope:
+      region: us-east-1
+  - actions:
+    - create
+  ratio: null
+- id: plan-k8s-delete-ratio
+  provider: kubernetes
+  effect: ESCALATE
+  constraint_class: deletion
+  principal: admin
+  source_ref: plan-1004
+  source_timestamp: '2026-04-04T09:00:00+00:00'
+  rule_text: Escalate a kubectl batch where more than 50% of the touched resources
+    are deletes.
+  provenance_hash: f40ffe666136e66ac2cda71601c5658705c70254ea8ac5730f9bdcc8d30be6b4
+  max_intents: null
+  max_matching: null
+  requires_all: null
+  forbid_together: null
+  ratio:
+    numerator:
+      actions:
+      - delete
+    denominator: {}
+    max: 0.5

aegis_core/_examples/plan_constraints.example.yaml.sig

@@ -0,0 +1,2 @@
+aegis-sig-v1
+ddd04711912c5c08cbd13bdbf708b1258ec68b4e213119098ea94f3d4b60dc17

aegis_core/_examples/sources/AEGIS-MANIFEST.sig

@@ -0,0 +1,32 @@
+{
+  "files": {
+    "PRINCIPALS.yaml": "bdc9ca4ae562397b203242031e960dc4a45eae1bf1ba6d8951f7e17d819a7cfb",
+    "git-4001.json": "8be2dd6c37ef643b3bc375b15d5d97889b00456285f594e21a3b4d52521e21de",
+    "git-789abc.json": "48ac500e13d36240ec5c72bf90e96b433a5873d636e9e36f99a73468e7fb5757",
+    "git-abc123.json": "ee3751fdcd64cf1dd374bf9f7b73cda723a4aced5053f32501ba9416de89afc7",
+    "git-bcd234.json": "a0de7b32bde75735c91504aa7156e7b2ba2ef961d0f439218507e40d0bdfd89a",
+    "git-def456.json": "9eba0bcbfa846766105d356b8877b390075c8bc63f65001a1a84878e1d2d96c3",
+    "jira-1001.json": "1f8833bada64c439b5b7f72af648e76ee1c0a726a1d03e02f6599c4c17d2225b",
+    "jira-1002.json": "ba428e864c6fe9aa3b25d8d8ca571ede0d2310888176668f9b3773b10dd31bca",
+    "jira-2001.json": "5467531afcee96f69ed6bf3174f62f82257e6e9766a581dc5f78d9cb310e1c59",
+    "jira-2002.json": "3492f1392a7e1518c051cec0b7b82c705ca90a96fbe24b1e99521f315ced7549",
+    "jira-3001.json": "08689e36a0cdb1c2a06e9c7acf415e323496072ad3834bf90e51c9af29ecf32a",
+    "jira-3002.json": "d5ba7481c7e300f116521a353989b4a409d1724ddd6566b0445df1adbae3d134",
+    "jira-3003.json": "71055681855c044920f5b4e24e653036780ccf73429d0e62d2f8fab45d42374e",
+    "jira-3004.json": "048b4f4e81680b15a4c5131835def7ff9dc96192554feb63d0ff264a6a36bea8",
+    "jira-3005.json": "9f712aed2dce329b55b8f4e558d52d5bdc84e02f3ed4ffb41cfef49c15ab245b",
+    "jira-5001.json": "02e13622d4e8819dd056128ad46c0e1b83d222a266281b7f298e02b43541d6f7",
+    "jira-5002.json": "dbcca55b9fe3196b16e4d49bff81faaf454499cf240cdfb480a109866c198d85",
+    "jira-5003.json": "f79c11b4d9f06b56dad96904a2fc44c49169366ed80ba12b2b87eba74eeb8895",
+    "jira-5004.json": "30a8d2654cd78031bea9ce26f5ddd7b4e8997c340820b1e49a470a2b83529a9a",
+    "jira-5006.json": "623a0de2fd94895777f2b6e67aef05901b79efb047fdbbd6e69cde1111644df7",
+    "plan-1001.json": "c412f6a2bb62c70129e001efec3d675b895ac0c39ddf77dcfb0b76341d5a84dc",
+    "plan-1002.json": "2d6b7e10be1c25aae3689713c9904b0033c90df691a9dec3bf9c9a2372ac2c5c",
+    "plan-1003.json": "bbbb5aeb11d133dc9a583b737b6ea3448510eb2888677019f4f6d304309249b9",
+    "plan-1004.json": "d8b2f30f9e400a395a6d2fb1ebbcc07cc60a5b994083f7cb8b18b4a19182e47e",
+    "plan-5005.json": "2d706c56fb48b215284a7faed521f13dcf956b8742fee3912b1d843d72eae4e4",
+    "slack-perma-1.json": "2c8945a68e413c300ef58fc6a6d3daa8e4d0029a26a454dfad983e2091a188d1"
+  },
+  "header": "aegis-manifest-v1",
+  "sig": "16b0f5f348626c74d6b40cfe21fe92d3e37703668fa51e9428fdc026cc297bc0"
+}

aegis_core/_examples/sources/PRINCIPALS.yaml

@@ -0,0 +1,31 @@
+# Transport-level attribution for the source snapshots in this directory
+# (REVIEW-4 T1.1): which principal each source_ref is attributed to by the
+# transport (repo owner, ticket author, Slack user), independently of the
+# self-asserted `principal` inside the payload. Signed like every other
+# policy file; loaded by aegis_core.provenance.FileSourceFetcher.
+principals:
+  git-4001: sre_lead
+  git-789abc: admin
+  git-abc123: admin
+  git-bcd234: admin
+  git-def456: sre_lead
+  jira-1001: sre_lead
+  jira-1002: developer
+  jira-2001: admin
+  jira-2002: admin
+  jira-3001: admin
+  jira-3002: sre_lead
+  jira-3003: sre_lead
+  jira-3004: admin
+  jira-3005: admin
+  jira-5001: admin
+  jira-5002: admin
+  jira-5003: sre_lead
+  jira-5004: admin
+  jira-5006: admin
+  plan-1001: sre_lead
+  plan-1002: admin
+  plan-1003: admin
+  plan-1004: admin
+  plan-5005: admin
+  slack-perma-1: admin

aegis_core/_examples/sources/git-4001.json

@@ -0,0 +1,17 @@
+{
+  "provider": "git",
+  "resource_pattern": "ref/main",
+  "actions": [
+    "push"
+  ],
+  "scope": {
+    "force": true
+  },
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "configuration",
+  "principal": "sre_lead",
+  "source_ref": "git-4001",
+  "source_timestamp": "2026-03-20T10:00:00+00:00",
+  "rule_text": "Block force-pushing to main; history rewrites on the shared branch are never allowed."
+}

aegis_core/_examples/sources/git-789abc.json

@@ -0,0 +1,17 @@
+{
+  "provider": "kubernetes",
+  "resource_pattern": "*",
+  "actions": [
+    "delete"
+  ],
+  "scope": {
+    "env": "prod"
+  },
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "git-789abc",
+  "source_timestamp": "2026-03-18T10:00:00+00:00",
+  "rule_text": "Block deleting any resource in a production environment, regardless of kind; only the runbook may delete in prod."
+}

aegis_core/_examples/sources/git-abc123.json

@@ -0,0 +1,15 @@
+{
+  "provider": "kubernetes",
+  "resource_pattern": "node/*",
+  "actions": [
+    "delete"
+  ],
+  "scope": {},
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "git-abc123",
+  "source_timestamp": "2026-02-01T12:00:00+00:00",
+  "rule_text": "Never delete cluster nodes directly; drain and cordon through the runbook instead."
+}

aegis_core/_examples/sources/git-bcd234.json

@@ -0,0 +1,15 @@
+{
+  "provider": "terraform",
+  "resource_pattern": "aws_autoscaling_group.*",
+  "actions": [
+    "update"
+  ],
+  "scope": {},
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "scaling",
+  "principal": "admin",
+  "source_ref": "git-bcd234",
+  "source_timestamp": "2026-03-05T14:00:00+00:00",
+  "rule_text": "Block direct terraform changes to autoscaling groups; use the scaling API instead."
+}

aegis_core/_examples/sources/git-def456.json

@@ -0,0 +1,16 @@
+{
+  "provider": "azure",
+  "resource_pattern": "aks/cluster/*",
+  "actions": [
+    "delete",
+    "scale"
+  ],
+  "scope": {},
+  "time_window": null,
+  "effect": "ESCALATE",
+  "constraint_class": "scaling",
+  "principal": "sre_lead",
+  "source_ref": "git-def456",
+  "source_timestamp": "2026-03-12T11:00:00+00:00",
+  "rule_text": "Escalate scaling or deleting AKS clusters for human review."
+}