{"ok":true,"policies":[{"schema_version":1,"id":"builtin:baseline","revision":1,"ruleset_id":"preflight-ruleset","ruleset_revision":1,"name":"baseline@1","identity_requirement":"any","hosted_liveness":"observe_only","unknown_required":"review","findings":{"brand_impersonation":"block","brand_claim_without_identity":"review","repo_gone":"block","repo_archived":"review","npm_package_missing":"block","pypi_package_missing":"block","npm_deprecated":"block","repo_no_push_6mo":"review","osv_package_advisory":"review"}},{"schema_version":1,"id":"builtin:first-party","revision":1,"ruleset_id":"preflight-ruleset","ruleset_revision":1,"name":"first-party@1","identity_requirement":"first_party","hosted_liveness":"observe_only","unknown_required":"review","findings":{"brand_impersonation":"block","brand_claim_without_identity":"review","repo_gone":"block","repo_archived":"review","npm_package_missing":"block","pypi_package_missing":"block","npm_deprecated":"block","repo_no_push_6mo":"review","osv_package_advisory":"review"}},{"schema_version":1,"id":"builtin:strict","revision":1,"ruleset_id":"preflight-ruleset","ruleset_revision":1,"name":"strict@1","identity_requirement":"first_party","hosted_liveness":"require_fresh_live","max_liveness_age_hours":48,"unknown_required":"block","findings":{"brand_impersonation":"block","brand_claim_without_identity":"review","repo_gone":"block","repo_archived":"review","npm_package_missing":"block","pypi_package_missing":"block","npm_deprecated":"block","repo_no_push_6mo":"review","osv_package_advisory":"review"}}],"ruleset":{"id":"preflight-ruleset","revision":1,"decision_precedence":["BLOCK","REVIEW","PASS"],"evaluation_order":["non_overridable_findings","minimum_evidence","required_identity","required_hosted_liveness","configured_findings"],"reason_order":["brand_impersonation","repo_gone","npm_package_missing","pypi_package_missing","npm_deprecated","minimum_evidence_missing","identity_first_party","identity_first_party_unknown","hosted_liveness_live","hosted_liveness_down","hosted_liveness_unknown","hosted_liveness_stale","hosted_liveness_not_applicable","brand_claim_without_identity","repo_archived","repo_no_push_6mo","osv_package_advisory"],"non_overridable_findings":["brand_impersonation","repo_gone","npm_package_missing","pypi_package_missing","npm_deprecated"],"minimum_evidence":{"satisfied_by_any":["canonical_repository","canonical_npm_package","canonical_pypi_package","canonical_remote_url"],"missing_action_by_policy":{"builtin:baseline":"REVIEW","builtin:first-party":"REVIEW","builtin:strict":"BLOCK"}},"identity":{"states":["true","false_conflicting_owner","unknown"],"action_by_requirement":{"any":{"true":"CONTEXT","false_conflicting_owner":"CONTEXT","unknown":"CONTEXT"},"first_party":{"true":"PASS","false_conflicting_owner":"BLOCK","unknown":"POLICY_UNKNOWN_REQUIRED"}},"false_conflicting_reason":"brand_impersonation","unknown_reason":"identity_first_party_unknown"},"hosted_liveness":{"applies_when":"has_remote=true","not_applicable_when":"has_remote=false","default_max_liveness_age_hours":48,"states":["live","down","unknown","stale","not_applicable"],"fresh_when":"as_of < attempted_at + max_liveness_age_hours","action_by_mode":{"observe_only":{"live":"CONTEXT","down":"REVIEW","unknown":"REVIEW","stale":"REVIEW","not_applicable":"NOT_APPLICABLE"},"require_fresh_live":{"live":"PASS","down":"BLOCK","unknown":"POLICY_UNKNOWN_REQUIRED","stale":"POLICY_UNKNOWN_REQUIRED","not_applicable":"NOT_APPLICABLE"}}},"finding_state_actions":{"true":"USE_POLICY_FINDING_ACTION","false":"PASS","unknown":"EXPOSE_UNKNOWN_WITH_NO_FINDING_UNLESS_REQUIRED_FACT"},"applicability":{"repository_findings":"canonical_repository_claimed","npm_findings":"each_canonical_npm_package","pypi_findings":"each_canonical_pypi_package","remote_findings":"has_remote=true","osv_findings":"each_canonical_package_name","multi_artifact_rule":"each_artifact_evaluated_independently; one good artifact does not erase a bad artifact","artifact_reason_sort":["ecosystem","canonical_artifact_id"]},"unknown_required_resolution":{"review":"REVIEW","block":"BLOCK"}},"policy_digests":{"builtin:baseline":"sha256:2867fe33a940144ad127395c47651b4414da0b480b9de32693648889b7434921","builtin:first-party":"sha256:23dd3385e8cd6cf64ee0a1cc5b4b8adeef59bd96397ed09794c391c54d31f5cd","builtin:strict":"sha256:a0e6901e41c9a494975a7163a3a2d16f7ebee6bbeaa3863f18a0f7f24068a2a7"},"audit_signed":false}