tyr: initial policy scaffold
Some checks are pending
Check Python Version Consistency / Check Python Version (push) Waiting to run

This commit is contained in:
Chris Christiansen 2026-09-02 18:17:27 +00:00
parent 6669f4ed99
commit af6469f145

4
tyr/policy/root.rego Normal file
View File

@ -0,0 +1,4 @@
package tyr
default allow = false
allow { input.service == "opax-mcp"; input.action == "read" }
allow { input.service == "ollama"; input.action == "infer"; input.model == "gemma3:4b" }