vulnerability-disclosure.cedar

// ═══════════════════════════════════════════════════════════
// Cedar Policy: Vulnerability Disclosure Governance
// ═══════════════════════════════════════════════════════════
//
// Governs what an AI security agent (e.g., Claude Mythos)
// is allowed to do when it discovers a vulnerability.
//
// The agent CAN: scan code, report findings internally
// The agent CANNOT: disclose externally, deploy patches,
// modify production without human approval
//
// Every action is receipt-signed for audit trail.
// ═══════════════════════════════════════════════════════════

// Allow scanning and internal reporting
permit(
  principal,
  action == Action::"scan_code",
  resource
);

permit(
  principal,
  action == Action::"report_finding",
  resource
) when {
  context.report_destination == "internal"
};

// Block external disclosure without human approval
forbid(
  principal,
  action == Action::"disclose_vulnerability",
  resource
) when {
  context.disclosure_target == "external" &&
  context.human_approval != true
};

// Block patch deployment to production
forbid(
  principal,
  action == Action::"deploy_patch",
  resource
) when {
  context.environment == "production" &&
  context.human_approval != true
};

// Block any action on critical severity without escalation
forbid(
  principal,
  action == Action::"report_finding",
  resource
) when {
  context.severity == "critical" &&
  context.escalated_to_human != true
};

// Rate limit scanning to prevent resource exhaustion
forbid(
  principal,
  action == Action::"scan_code",
  resource
) when {
  context.daily_scan_count >= 1000
};