soft-deny-write-env-file.json

{
  "name": "soft-deny-write-env-file",
  "description": "write_file soft-deny path: confirms the sentinel-resource pattern (context.file_path match against Agent::File::file) works identically on both engines.",
  "policies": "@rule_id(\"base_permit\")\npermit (principal, action, resource);\n@tier(\"hard\") @rule_id(\"rm_slash\")\nforbid (principal, action == Agent::Action::\"execute_bash\", resource) when { context.command like \"*rm -rf /*\" };\n@tier(\"soft\") @rule_id(\"force_push_any\") @approval_timeout_s(\"300\") @severity(\"medium\") @category(\"destructive\")\nforbid (principal, action == Agent::Action::\"execute_bash\", resource) when { context.command like \"*git push --force*\" };\n@tier(\"soft\") @rule_id(\"force_push_main\") @approval_timeout_s(\"600\") @severity(\"high\") @category(\"destructive\")\nforbid (principal, action == Agent::Action::\"execute_bash\", resource) when { context.command like \"*git push --force origin main*\" };\n@tier(\"soft\") @rule_id(\"write_env_files\") @approval_timeout_s(\"600\") @severity(\"high\") @category(\"filesystem\")\nforbid (principal, action == Agent::Action::\"write_file\", resource) when { context.file_path like \"*.env\" };",
  "input": {
    "principal": { "type": "Agent::TaskAgent", "id": "new_task" },
    "action":    { "type": "Agent::Action",    "id": "write_file" },
    "resource":  { "type": "Agent::File",      "id": "file" },
    "context":   { "file_path": "src/.env" }
  },
  "expected": {
    "decision": "deny",
    "matching_rule_ids": ["write_env_files"]
  }
}