{
  "schema": "futhorc-policy-test-results/1",
  "release": "v2026.08.16.12",
  "generated_at": "2026-08-16T19:53:51.178025+00:00",
  "authority": "actual_local_python_unittest_run",
  "truth_boundary": "Passing tests establish deterministic behavior of this local project policy only. They do not authenticate domains, grant real-world authorization, verify DNS, or establish external affiliation.",
  "environment": {
    "python": "3.13.5",
    "implementation": "CPython",
    "platform": "Linux-6.18.35-x86_64-with-glibc2.41"
  },
  "artifact_sha256": {
    "assets/data/rune-domain-network-policy.json": "78c72a894bdfc2ba0aabde169ba3fc965ab5774fb4a2bcd7dc3f7ee968086a5d",
    "assets/data/fixtures/futhorc-policy-cases.json": "c9b313977b7528678a283227f335c653b4e33920afd46d527dece0a4766ee3b1",
    "tools/futhorc_policy.py": "b27ea7ba03136ed259b2e8dfe97da39240bdf77e29bab773ae8ec59e17ac16df",
    "tests/test_futhorc_policy.py": "eae1be1f6794b2fdb62f3f43ef5c55a9a1bdfe55d862bdce5b8de7f0970a7153"
  },
  "deterministic_summary": {
    "tests_run": 23,
    "failures": 0,
    "errors": 0,
    "successful": true,
    "fixture_cases": 9,
    "fixture_cases_pass": 9,
    "policy_digest_sha256": "5b9cd4f4a945593f0cae7f3681e799b98adacfa8dfb4d09ab7fe3ff5e5976d08"
  },
  "deterministic_digest_sha256": "6adbb0045e97cd513cf81a525a706fcf295ecf52bc5d0d9d24784ed7f2fd554a",
  "scenario_matrix": [
    {
      "id": "same-rdn-query",
      "expected": "allow",
      "actual": "allow",
      "reason_code": "same_group",
      "rule_id": "rule.same-group.allow",
      "pass": true
    },
    {
      "id": "same-other-query",
      "expected": "allow",
      "actual": "allow",
      "reason_code": "same_group",
      "rule_id": "rule.same-group.allow",
      "pass": true
    },
    {
      "id": "cross-default-deny",
      "expected": "deny",
      "actual": "deny",
      "reason_code": "cross_group_default_deny",
      "rule_id": "rule.cross-group.default-deny",
      "pass": true
    },
    {
      "id": "bridge-query-allow",
      "expected": "allow",
      "actual": "allow",
      "reason_code": "explicit_bridge",
      "rule_id": "bridge.ear-to-othala.query",
      "pass": true
    },
    {
      "id": "bridge-review-allow",
      "expected": "allow",
      "actual": "allow",
      "reason_code": "explicit_bridge",
      "rule_id": "bridge.ear-to-othala.review",
      "pass": true
    },
    {
      "id": "bridge-ack-allow",
      "expected": "allow",
      "actual": "allow",
      "reason_code": "explicit_bridge",
      "rule_id": "bridge.othala-to-ear.ack",
      "pass": true
    },
    {
      "id": "bridge-semantic-scope-deny",
      "expected": "deny",
      "actual": "deny",
      "reason_code": "cross_group_default_deny",
      "rule_id": "rule.cross-group.default-deny",
      "pass": true
    },
    {
      "id": "same-other-haegl-query",
      "expected": "allow",
      "actual": "allow",
      "reason_code": "same_group",
      "rule_id": "rule.same-group.allow",
      "pass": true
    },
    {
      "id": "haegl-protected-route-deny",
      "expected": "deny",
      "actual": "deny",
      "reason_code": "semantic_not_allowed_for_endpoint_group",
      "rule_id": "rule.semantic.group-capability",
      "pass": true
    }
  ],
  "failed_tests": [],
  "error_tests": []
}