{"schemaVersion":"1.0.0","policyId":"qeravio-public-ai-least-privilege-policy:1.0.0","readAt":"2026-08-22T04:33:32.086Z","servingVersion":{"id":"4f2cf40b-a6fd-4f50-b8e3-64efa4108c2c","uploadedAt":"2026-08-22T01:57:02.887779Z"},"sourceSnapshot":{"id":"qtop197-public-ai-operation-decision-log","canonicalSourceCount":7,"sources":["canonical_ai_roster","canonical_ai_rulebook","public_execution_ledger","public_ai_unit_registry_evidence","public_result_ownership_evidence","public_author_checker_separation_evidence","public_ai_operation_decision_log_evidence"],"localPaths":"not_published"},"policyOwner":{"implementationAuthor":"work_system_manager_least_privilege_builder_ai","independentChecker":"seal_least_privilege_checker_ai","businessAuthority":"adir_project_owner","peopleEmployedInAiRoster":0},"policies":[],"evaluationProof":{"status":"not_verified","allowedScenarioCount":0,"deniedScenarioCount":0,"allAllowsAreNonCredentials":true,"allHighImpactActionsDenied":true,"unknownTaskScopesDenied":false},"privacyBoundary":{"publicWriteEndpointCount":0,"rawUserPromptsStored":false,"promptHashesStored":false,"outputTextStored":false,"rawToolIoStored":false,"userIdentifiersStored":false,"personalDataStored":false,"arbitraryJsonStored":false,"freeTextReasonsStored":false,"privateUrlsStored":false,"credentialsStored":false},"runtimeBoundary":{"policyEvaluationOnly":true,"allowedTaskScopes":["qtop-198"],"livePermissionGrant":"not_implemented","liveCredentialIssuance":"not_implemented","liveToolConnection":"not_implemented","liveExternalActionExecution":"not_implemented","authenticatedMemberCoverage":"not_verified","wholeProductEnforcement":"not_verified"},"openGates":["Connect the evaluator to authenticated task assignment only after an authorization and revocation design is independently verified.","Issue no credential until scope, expiry, storage, rotation, revocation and replay defenses pass security review.","Bind every live tool invocation to an evaluated policy record without storing prompts, user content or raw tool traffic.","Add one exact owner approval flow before any send, publication, purchase, account mutation, deployment or other external effect.","Verify organization and member isolation, live revocation, concurrency and rollback in authorized accounts.","Measure denied overreach, repeated use and member outcomes before claiming whole-product enforcement or value."],"claimBoundary":{"livePermissionsGranted":false,"credentialsIssued":false,"liveToolsConnected":false,"externalActionsAuthorized":false,"spendAuthorityGranted":false,"deploymentAuthorized":false,"sensitiveDataAccessAuthorized":false,"runtimeAssignmentVerified":false,"perInvocationEnforcementVerified":false,"authenticatedMemberFlowsVerified":false,"wholeProductEnforcementVerified":false,"repeatedOutcomeValueProven":false,"wholeProductScore99Claimed":false},"state":"release_verification_pending","reason":"serving_version_changed","releaseEvidence":{"workerVersionId":"56bbaf52-e861-4c6d-870e-87c2369a2b78","verificationCompletedAt":"2026-08-20T18:57:14.474Z","registryEvidenceId":"qeravio-qtop193-public-ai-unit-registry-release-20260820T185710Z","decisionLogEvidenceId":"qeravio-qtop197-public-ai-operation-decision-log-release-20260820T185710Z","activeUnitCount":9,"policyRecordCount":24,"uniqueToolFamilyCount":24,"dataDomainCount":6,"safeActionClassCount":6,"highImpactActionClassCount":9,"maxEvaluationTtlSeconds":900,"defaultDenyPolicyCount":24,"distinctOwnerCheckerCount":24,"selfCheckerCount":0,"allowedProofCount":24,"deniedProofCount":13,"publicWriteEndpointCount":0,"humanEmployeeCount":0,"credentialIssuedCount":0,"spendAuthorityCount":0,"externalActionAuthorityCount":0,"liveToolConnectionCount":0,"livePermissionEnforcementStatus":"not_implemented","wholeProductEnforcementStatus":"not_verified","sourceMappingVerified":true,"reviewerSeparatedFromImplementationAuthor":true,"openP0Count":0,"openP1Count":0,"openP2Count":0,"evidenceId":"qeravio-qtop198-public-ai-least-privilege-release-20260820T185710Z"}}