hyf

Context-aware query service for Radroots
git clone https://radroots.dev/git/hyf.git
Log | Files | Refs | README | LICENSE

SC001_cross_tenant.json (1747B)

      1 {
      2   "fixture_format_version": 1,
      3   "case_id": "SC001_cross_tenant",
      4   "requirements": [
      5     "HYF-SEC-001",
      6     "HYF-MATCH-003"
      7   ],
      8   "family": "security",
      9   "boundary": "security",
     10   "operation": "security.boundary",
     11   "purpose": "Cross-tenant records are not authorized by their presence in input.",
     12   "implementation_status": "planned",
     13   "required_from_step": "S114",
     14   "mandatory": true,
     15   "context": {
     16     "source_time": "2026-09-21T09:00:00-07:00",
     17     "evaluated_at": "2026-09-21T10:00:00-07:00",
     18     "timezone": "America/Vancouver",
     19     "locale": "en-CA",
     20     "tenant": "test-tenant-1",
     21     "seed": 101,
     22     "versions": {
     23       "schema": "test-projection-1",
     24       "taxonomy": "test-only-produce-1",
     25       "normalization": "test-only-norm-1",
     26       "review_policy": "test-only-review-1",
     27       "ranking_policy": "test-only-ranking-1",
     28       "question_bundle": "test-only-questions-1",
     29       "model": "jev-1.13.0"
     30     }
     31   },
     32   "given": {
     33     "trusted_tenant": "one",
     34     "snapshot_tenant": "two"
     35   },
     36   "provider_script": [],
     37   "then": [
     38     {
     39       "operator": "equals",
     40       "path": "/validation/accepted",
     41       "value": false
     42     },
     43     {
     44       "operator": "equals",
     45       "path": "/execution/provider_calls",
     46       "value": 0
     47     }
     48   ],
     49   "prohibited": [
     50     "No authoritative business mutation or reservation is performed by Hyf."
     51   ],
     52   "provenance": {
     53     "kind": "synthetic",
     54     "author": "hyf_v1_jev handoff",
     55     "review_status": "implementation/domain review required; not a live-model label"
     56   },
     57   "assumptions": [
     58     "This is a semantic test projection, not an already implemented public wire payload.",
     59     "Test-only rules and scripted model outputs do not define production thresholds or certify model quality."
     60   ]
     61 }