agentcli/examples/trust-enforcement.json at main · amittell/agentcli · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
{
  "version": "0.2",
  "identity_profiles": [
    {
      "id": "high-trust-agent",
      "provider": "none",
      "subject": {
        "kind": "agent",
        "principal": "agent://example.com/production-deployer",
        "display_name": "Production Deployer"
      },
      "trust": {
        "level": "autonomous",
        "constraints": {
          "max_autonomy": "autonomous"
        }
      }
    },
    {
      "id": "low-trust-agent",
      "provider": "none",
      "subject": {
        "kind": "agent",
        "principal": "agent://example.com/data-collector",
        "display_name": "Data Collector"
      },
      "trust": {
        "level": "restricted",
        "constraints": {
          "max_autonomy": "supervised",
          "escalation": "fail"
        }
      }
    }
  ],
  "workflows": [
    {
      "id": "graduated-trust",
      "name": "Graduated Trust Workflow",
      "contract": {
        "audit": "always"
      },
      "tasks": [
        {
          "id": "collect-data",
          "name": "Collect Data (low trust OK)",
          "shell": {
            "program": "echo",
            "args": ["collecting data"]
          },
          "target": { "session_target": "shell" },
          "identity": { "ref": "low-trust-agent" },
          "contract": {
            "required_trust_level": "restricted",
            "trust_enforcement": "strict"
          },
          "schedule": { "cron": "*/15 * * * *" }
        },
        {
          "id": "deploy-staging",
          "name": "Deploy to Staging (needs autonomous)",
          "shell": {
            "program": "echo",
            "args": ["deploying to staging"]
          },
          "target": { "session_target": "shell" },
          "identity": { "ref": "high-trust-agent" },
          "contract": {
            "required_trust_level": "autonomous",
            "trust_enforcement": "strict"
          },
          "schedule": { "cron": "0 2 * * *" }
        },
        {
          "id": "health-check",
          "name": "Health Check (advisory trust)",
          "shell": {
            "program": "echo",
            "args": ["checking health"]
          },
          "target": { "session_target": "shell" },
          "identity": { "ref": "low-trust-agent" },
          "contract": {
            "required_trust_level": "supervised",
            "trust_enforcement": "advisory"
          },
          "schedule": { "cron": "*/5 * * * *" }
        }
      ]
    }
  ]
}