9 lines
347 B
Rego
9 lines
347 B
Rego
# Wiring checks for AAP policy enforcement.
|
|
# aap/smoke/allow_all - always passes (safe first attachment)
|
|
# aap/smoke/deny_all - always blocks, proving enforcement is active
|
|
package aap.smoke
|
|
|
|
allow_all := {"allowed": true, "violations": []}
|
|
|
|
deny_all := {"allowed": false, "violations": ["aap.smoke.deny_all: policy enforcement is active"]}
|