# Wiring checks for AAP policy enforcement.
#   aap/smoke/allow_all - always passes (safe first attachment)
#   aap/smoke/deny_all  - always blocks, proving enforcement is active
package aap.smoke

allow_all := {"allowed": true, "violations": []}

deny_all := {"allowed": false, "violations": ["aap.smoke.deny_all: policy enforcement is active"]}