ece4e2349f
Add breach evaluator that compares posture changes against active sessions and applies BreachResponse policy: - LogOnly/AlertDelegates: log, no session enforcement - ReducePosture: downgrade System -> Application, session continues - SuspendTrust: terminate session immediately - RevokeAccord: terminate session, Accord dead Posture change detection via 30s polling loop on posture-current ConfigMap (matching existing reaper interval pattern). No mid-session upgrade — downgrade only, upgrade requires new ceremony. 9 unit tests for breach evaluation covering all BreachResponse variants. Signed-off-by: Tyler King <tking@guildhouse.dev> Signed-off-by: Tyler J King <tking727@gmail.com> |
||
|---|---|---|
| .. | ||
| src | ||
| tests/fixtures | ||
| Cargo.toml | ||