{
  "pack_id": "CHDB-20260831",
  "scope": "static policy fixture; not executed; not independently validated",
  "accepted_grant": "GRANT SELECT ON analytics_events.* TO analytics_events_reader;",
  "rejected_grant": "GRANT SELECT ON *.* TO analytics_events_reader;",
  "matrix": [
    {
      "resource": "analytics_events.events",
      "action": "SELECT",
      "expected_status": "EXPECTED ALLOW",
      "basis": "accepted event-database read scope"
    },
    {
      "resource": "analytics_events.sessions",
      "action": "SELECT",
      "expected_status": "EXPECTED ALLOW",
      "basis": "accepted event-database read scope"
    },
    {
      "resource": "finance.invoices",
      "action": "SELECT",
      "expected_status": "EXPECTED DENY",
      "basis": "outside authored event scope"
    },
    {
      "resource": "analytics_events.events",
      "action": "INSERT",
      "expected_status": "EXPECTED DENY",
      "basis": "no write grant in accepted fixture"
    },
    {
      "resource": "analytics_events.events",
      "action": "ALTER",
      "expected_status": "EXPECTED DENY",
      "basis": "no write grant in accepted fixture"
    },
    {
      "resource": "analytics_events.events",
      "action": "DROP",
      "expected_status": "EXPECTED DENY",
      "basis": "no write grant in accepted fixture"
    },
    {
      "resource": "*.*",
      "action": "SELECT",
      "expected_status": "LINT REJECT",
      "basis": "broad scope violates authored policy"
    }
  ],
  "sha256": {
    "accepted-scoped-grant-CHDB-20260831.sql": "e42df2c7fdd5bd3bfc8925d1cbd28601c0893e2411639aab45b1ad5c9022b876",
    "access-matrix-CHDB-20260831.csv": "775d0a0e3623061fcc60aeb38ec0b1d32db6e89571f01c9400131955e467bd56",
    "access-scope-rules-CHDB-20260831.md": "51009f31b3224be3c840d781bcad88829683b2fc15210dee7f2da1c4db5309f7",
    "assumption-register-CHDB-20260831.csv": "edf1e0c19553cde23d97b29c7bde48de9aaee6124f372f4eacad7c3cf38b3bb0",
    "external-source-check-CHDB-20260831.md": "4ae60c9dd0df6eeba575091651246ed86fd16ca7a3a8c77fe162edb649e2cd1a",
    "independent-reproduction-protocol-CHDB-20260831.md": "a0bf05fe9844531e5afb41f2762256785bc2c8fb1eae4b0f11917ccc19a3cd73",
    "rejected-broad-grant-CHDB-20260831.sql": "7878d5e1fe3143cafe26208c5f47a3c8b8203eb99fada3e6f973aef93846d007",
    "synthetic-schema-CHDB-20260831.sql": "967fcf2e814c88fd6594fc5af2693d68df31d7d4b7a4c70c0dd264d3bca03ef8"
  },
  "warnings": [
    "No network or database access is performed.",
    "Expected statuses are authored policy outcomes, not server results.",
    "No ClickHouse syntax, engine, security, or deployment conformance is established."
  ]
}