From af6469f145c72638ab4e9fcfbb0b5ca3a9ffd9fe Mon Sep 17 00:00:00 2001
From: Chris Christiansen <chris.christiansen@vauco.no>
Date: Wed, 2 Sep 2026 18:17:27 +0000
Subject: [PATCH] tyr: initial policy scaffold

---
 tyr/policy/root.rego | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 tyr/policy/root.rego

diff --git a/tyr/policy/root.rego b/tyr/policy/root.rego
new file mode 100644
index 0000000..ceae409
--- /dev/null
+++ b/tyr/policy/root.rego
@@ -0,0 +1,4 @@
+package tyr
+default allow = false
+allow { input.service == "opax-mcp"; input.action == "read" }
+allow { input.service == "ollama"; input.action == "infer"; input.model == "gemma3:4b" }