{"data":[{"kind":"Policy","metadata":{"name":"agent-authorization-1","version":"1.0.0","description":"Bootstrapped from policies/agent-authorization.cedar (1/6)","tags":["bootstrap","agent-authorization"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:11.106Z","updatedAt":"2026-05-08T00:26:11.106Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal in Role::\"AgentOwner\",\n  action == Action::\"read\",\n  resource\n)\nwhen {\n  resource.owner == principal\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"agent-authorization-2","version":"1.0.0","description":"Bootstrapped from policies/agent-authorization.cedar (2/6)","tags":["bootstrap","agent-authorization"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:11.277Z","updatedAt":"2026-05-08T00:26:11.277Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal in Role::\"AdminAgent\",\n  action,\n  resource\n);","statementCount":1}},{"kind":"Policy","metadata":{"name":"agent-authorization-3","version":"1.0.0","description":"Bootstrapped from policies/agent-authorization.cedar (3/6)","tags":["bootstrap","agent-authorization"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:11.344Z","updatedAt":"2026-05-08T00:26:11.344Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal in Role::\"WorkflowExecutor\",\n  action == Action::\"execute\",\n  resource in ResourceType::\"Workflow\"\n)\nwhen {\n  resource.status == \"approved\" &&\n  principal has permission\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"agent-authorization-4","version":"1.0.0","description":"Bootstrapped from policies/agent-authorization.cedar (4/6)","tags":["bootstrap","agent-authorization"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:11.361Z","updatedAt":"2026-05-08T00:26:11.361Z"},"spec":{"format":"cedar","cedarSource":"forbid (\n  principal in Role::\"Agent\",\n  action in [Action::\"deploy\", Action::\"modify\"],\n  resource in Environment::\"production\"\n)\nunless {\n  context has approvalRequired &&\n  context.approvalRequired == true &&\n  context has approvedBy\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"agent-authorization-5","version":"1.0.0","description":"Bootstrapped from policies/agent-authorization.cedar (5/6)","tags":["bootstrap","agent-authorization"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:11.374Z","updatedAt":"2026-05-08T00:26:11.374Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal,\n  action == Action::\"create\",\n  resource\n)\nwhen {\n  resource.namespace == principal.namespace &&\n  resource.type in [\"Issue\", \"MergeRequest\", \"Comment\"]\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"agent-authorization-6","version":"1.0.0","description":"Bootstrapped from policies/agent-authorization.cedar (6/6)","tags":["bootstrap","agent-authorization"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:11.375Z","updatedAt":"2026-05-08T00:26:11.375Z"},"spec":{"format":"cedar","cedarSource":"forbid (\n  principal,\n  action in [Action::\"delete\", Action::\"destroy\", Action::\"purge\"],\n  resource\n)\nunless {\n  context has mfaVerified &&\n  context.mfaVerified == true\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-1","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (1/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:11.698Z","updatedAt":"2026-05-08T00:26:11.698Z"},"spec":{"format":"cedar","cedarSource":"forbid (\n  principal == Agent::\"claude-code\",\n  action == Action::\"git_push\",\n  resource\n)\nwhen {\n  resource has branch &&\n  (resource.branch == \"main\" || resource.branch == \"development\")\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-10","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (10/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.759Z","updatedAt":"2026-05-08T00:26:12.759Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal == Agent::\"claude-code\",\n  action == Action::\"file_edit\",\n  resource\n)\nwhen {\n  resource has path &&\n  !(resource.path like \"*.env\") &&\n  !(resource.path like \"*credentials*\") &&\n  !(resource.path like \"*secret*\") &&\n  !(resource.path like \"*token*\")\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-11","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (11/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.762Z","updatedAt":"2026-05-08T00:26:12.762Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal == Agent::\"claude-code\",\n  action == Action::\"file_create\",\n  resource\n)\nwhen {\n  resource has path &&\n  (resource.path like \"*.ts\" ||\n   resource.path like \"*.tsx\" ||\n   resource.path like \"*.js\" ||\n   resource.path like \"*.json\" ||\n   resource.path like \"*.yaml\" ||\n   resource.path like \"*.yml\" ||\n   resource.path like \"*.cedar\" ||\n   resource.path like \"*.css\" ||\n   resource.path like \"*.php\" ||\n   resource.path like \"Dockerfile\" ||\n   resource.path like \".dockerignore\" ||\n   resource.path like \".gitignore\")\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-12","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (12/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.764Z","updatedAt":"2026-05-08T00:26:12.764Z"},"spec":{"format":"cedar","cedarSource":"forbid (\n  principal == Agent::\"claude-code\",\n  action == Action::\"gitlab_repo_create\",\n  resource\n);","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-13","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (13/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.765Z","updatedAt":"2026-05-08T00:26:12.765Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal == Agent::\"claude-code\",\n  action in [Action::\"gitlab_issue_create\", Action::\"gitlab_issue_close\",\n             Action::\"gitlab_issue_list\", Action::\"gitlab_issue_view\"],\n  resource\n);","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-14","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (14/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.765Z","updatedAt":"2026-05-08T00:26:12.765Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal == Agent::\"claude-code\",\n  action in [Action::\"gitlab_mr_create\", Action::\"gitlab_mr_merge\",\n             Action::\"gitlab_mr_list\", Action::\"gitlab_mr_view\"],\n  resource\n);","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-15","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (15/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.775Z","updatedAt":"2026-05-08T00:26:12.775Z"},"spec":{"format":"cedar","cedarSource":"forbid (\n  principal == Agent::\"claude-code\",\n  action == Action::\"execute\",\n  resource\n)\nwhen {\n  resource has command &&\n  (resource.command like \"*rm -rf*\" ||\n   resource.command like \"*reset --hard*\" ||\n   resource.command like \"*push --force*\" ||\n   resource.command like \"*drop database*\" ||\n   resource.command like \"*docker rm*\")\n}\nunless {\n  context has destructive_approved &&\n  context.destructive_approved == true\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-16","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (16/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.801Z","updatedAt":"2026-05-08T00:26:12.801Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal == Agent::\"claude-code\",\n  action == Action::\"read\",\n  resource\n);","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-17","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (17/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.806Z","updatedAt":"2026-05-08T00:26:12.806Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal == Agent::\"claude-code\",\n  action == Action::\"execute\",\n  resource\n)\nwhen {\n  resource has command_type &&\n  [\"build\", \"test\", \"lint\", \"typecheck\", \"status\"].contains(resource.command_type)\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-18","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (18/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.829Z","updatedAt":"2026-05-08T00:26:12.829Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal == Agent::\"claude-code\",\n  action == Action::\"execute\",\n  resource\n)\nwhen {\n  resource has command\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-19","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (19/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.839Z","updatedAt":"2026-05-08T00:26:12.839Z"},"spec":{"format":"cedar","cedarSource":"forbid (\n  principal == Agent::\"claude-code\",\n  action == Action::\"agent_spawn\",\n  resource\n)\nunless {\n  resource has agent_registry &&\n  resource.agent_registry == \"blueflyio\"\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-2","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (2/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:11.768Z","updatedAt":"2026-05-08T00:26:11.768Z"},"spec":{"format":"cedar","cedarSource":"forbid (\n  principal == Agent::\"claude-code\",\n  action == Action::\"git_branch_create\",\n  resource\n);","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-20","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (20/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.848Z","updatedAt":"2026-05-08T00:26:12.848Z"},"spec":{"format":"cedar","cedarSource":"permit (\n  principal == Agent::\"claude-code\",\n  action == Action::\"agent_spawn\",\n  resource\n)\nwhen {\n  resource has agent_registry &&\n  resource.agent_registry == \"blueflyio\"\n};","statementCount":1}},{"kind":"Policy","metadata":{"name":"claude-code-21","version":"1.0.0","description":"Bootstrapped from policies/claude-code.cedar (21/39)","tags":["bootstrap","claude-code"],"complianceFrameworks":[],"classification":"general","createdAt":"2026-05-08T00:26:12.863Z","updatedAt":"2026-05-08T00:26:12.863Z"},"spec":{"format":"cedar","cedarSource":"forbid (\n  principal == Agent::\"claude-code\",\n  action in [Action::\"file_create\", Action::\"file_edit\", Action::\"file_delete\"],\n  resource\n)\nwhen {\n  resource has path &&\n  (resource.path like \"/etc/*\" ||\n   resource.path like \"/usr/*\" ||\n   resource.path like \"/var/*\" ||\n   resource.path like \"/System/*\" ||\n   resource.path like \"/Library/*\" ||\n   resource.path like \"C:\\\\Windows\\\\*\" ||\n   resource.path like \"C:\\\\Program Files\\\\*\")\n};","statementCount":1}}],"pagination":{"total":20,"page":1,"per_page":20,"pages":1}}