{
  "schema_version": "wheelie_source_acl_replay_authz_receipt_packet/v1",
  "packet_id": "source-acl-authz-keebdisplay-20260524",
  "generated_at": "2026-05-24T02:00:00Z",
  "environment": "HERMETIC",
  "repository_id": "repo_wheelie_keebdisplay",
  "project_id": "project_keebdisplay_launch",
  "source_authority_state": "gravity_source_shadow_public_read",
  "authoritative_actor_source": "verified_wheelie_gravity_principal_plus_source_acl_grant",
  "public_route_auth_class": "public_read_approved_selected_project",
  "redaction_status": "public_safe_redacted",
  "route_discovery_support_level": "native_public_read_selected_project",
  "acl_replay": {
    "receipt_id": "source-acl-authz-keebdisplay-20260524:acl-replay",
    "repository_id": "repo_wheelie_keebdisplay",
    "generated_at": "2026-05-24T02:00:00Z",
    "snapshot": {
      "scope_kind": "repository",
      "scope_id": "repo_wheelie_keebdisplay",
      "generated_at": "2026-05-24T02:00:00Z",
      "repository_id": "repo_wheelie_keebdisplay",
      "principals": [
        {
          "principal_id": "prn_legacy_email_022ada96-aafe-56cc-8906-30eda095feef",
          "kind": "human",
          "created_at": "2026-05-24T02:00:00Z"
        },
        {
          "principal_id": "prn_legacy_email_5a7db1a0-9089-55a0-a18f-de4f624747f6",
          "kind": "human",
          "created_at": "2026-05-24T02:00:00Z"
        },
        {
          "principal_id": "prn_legacy_email_7b5bf272-82ee-53a9-9bf2-3d1c970615d4",
          "kind": "human",
          "created_at": "2026-05-24T02:00:00Z"
        },
        {
          "principal_id": "prn_legacy_email_d081541e-6bea-5e63-bce9-e31082d21c5d",
          "kind": "human",
          "created_at": "2026-05-24T02:00:00Z"
        }
      ],
      "identifiers": [
        {
          "identifier_id": "idn_legacy_8f86c444-72d4-5549-b4d5-42d9d5017766",
          "principal_id": "prn_legacy_email_022ada96-aafe-56cc-8906-30eda095feef",
          "identifier_kind": "email",
          "identifier_value": "maintainer@keebdisplay.example",
          "verified_at": "2026-05-24T02:00:00Z"
        },
        {
          "identifier_id": "idn_legacy_fd8d34fb-3a34-546e-a0c3-d2c2be30a39d",
          "principal_id": "prn_legacy_email_5a7db1a0-9089-55a0-a18f-de4f624747f6",
          "identifier_kind": "email",
          "identifier_value": "reader@keebdisplay.example",
          "verified_at": "2026-05-24T02:00:00Z"
        },
        {
          "identifier_id": "idn_legacy_aa682e1d-d65d-5e96-9708-8c79af8a9a71",
          "principal_id": "prn_legacy_email_7b5bf272-82ee-53a9-9bf2-3d1c970615d4",
          "identifier_kind": "email",
          "identifier_value": "cross-org-attacker@example.invalid",
          "verified_at": "2026-05-24T02:00:00Z"
        },
        {
          "identifier_id": "idn_legacy_7c4ae39a-f583-506e-ba21-f698cbdda641",
          "principal_id": "prn_legacy_email_d081541e-6bea-5e63-bce9-e31082d21c5d",
          "identifier_kind": "email",
          "identifier_value": "same-org-no-grant@keebdisplay.example",
          "verified_at": "2026-05-24T02:00:00Z"
        }
      ],
      "memberships": [
        {
          "membership_id": "mem_legacy_50ff0297-899f-54e0-8fb1-5424bd2793ba",
          "principal_id": "prn_legacy_email_5a7db1a0-9089-55a0-a18f-de4f624747f6",
          "scope_kind": "organization",
          "scope_id": "org_wheelie_public_projects",
          "role": "viewer",
          "status": "active",
          "created_at": "2026-05-24T02:00:00Z",
          "accepted_at": "2026-05-24T02:00:00Z"
        },
        {
          "membership_id": "mem_legacy_6f07c71c-06cd-5691-be23-1d0c4358ddb9",
          "principal_id": "prn_legacy_email_d081541e-6bea-5e63-bce9-e31082d21c5d",
          "scope_kind": "organization",
          "scope_id": "org_wheelie_public_projects",
          "role": "viewer",
          "status": "active",
          "created_at": "2026-05-24T02:00:00Z",
          "accepted_at": "2026-05-24T02:00:00Z"
        },
        {
          "membership_id": "mem_legacy_bb28b0b3-d40c-5fea-aaa5-ffd12741ae4c",
          "principal_id": "prn_legacy_email_022ada96-aafe-56cc-8906-30eda095feef",
          "scope_kind": "organization",
          "scope_id": "org_wheelie_public_projects",
          "role": "admin",
          "status": "active",
          "created_at": "2026-05-24T02:00:00Z",
          "accepted_at": "2026-05-24T02:00:00Z"
        }
      ],
      "grants": [
        {
          "grant_id": "gr_legacy_df92adec-cb79-5275-94bd-b0798cbe8bc7",
          "subject_kind": "principal",
          "subject_id": "prn_legacy_email_022ada96-aafe-56cc-8906-30eda095feef",
          "resource_kind": "repository",
          "resource_id": "repo_wheelie_keebdisplay",
          "capability": "admin",
          "source_kind": "direct",
          "created_at": "2026-05-24T02:00:00Z"
        },
        {
          "grant_id": "gr_legacy_726320e3-ee5b-5c13-bbb7-78f7ac31f63e",
          "subject_kind": "principal",
          "subject_id": "prn_legacy_email_022ada96-aafe-56cc-8906-30eda095feef",
          "resource_kind": "repository",
          "resource_id": "repo_wheelie_keebdisplay",
          "capability": "export",
          "source_kind": "direct",
          "created_at": "2026-05-24T02:00:00Z"
        },
        {
          "grant_id": "gr_legacy_56defab0-cf9e-5b66-94e8-6c07b202df41",
          "subject_kind": "principal",
          "subject_id": "prn_legacy_email_022ada96-aafe-56cc-8906-30eda095feef",
          "resource_kind": "repository",
          "resource_id": "repo_wheelie_keebdisplay",
          "capability": "read",
          "source_kind": "direct",
          "created_at": "2026-05-24T02:00:00Z"
        },
        {
          "grant_id": "gr_legacy_0a6ffdd5-b113-5ef4-8ef0-53f370c2ce35",
          "subject_kind": "principal",
          "subject_id": "prn_legacy_email_022ada96-aafe-56cc-8906-30eda095feef",
          "resource_kind": "repository",
          "resource_id": "repo_wheelie_keebdisplay",
          "capability": "write",
          "source_kind": "direct",
          "created_at": "2026-05-24T02:00:00Z"
        },
        {
          "grant_id": "gr_legacy_bef1193c-cb03-5e9f-b787-ab3640195d86",
          "subject_kind": "principal",
          "subject_id": "prn_legacy_email_5a7db1a0-9089-55a0-a18f-de4f624747f6",
          "resource_kind": "repository",
          "resource_id": "repo_wheelie_keebdisplay",
          "capability": "read",
          "source_kind": "direct",
          "created_at": "2026-05-24T02:00:00Z"
        },
        {
          "grant_id": "gr_legacy_0d4b7bc0-4436-547b-90ef-0f753a6eb6e8",
          "subject_kind": "principal",
          "subject_id": "prn_legacy_email_7b5bf272-82ee-53a9-9bf2-3d1c970615d4",
          "resource_kind": "repository",
          "resource_id": "repo_wheelie_keebdisplay",
          "capability": "admin",
          "source_kind": "direct",
          "created_at": "2026-05-24T02:00:00Z"
        },
        {
          "grant_id": "gr_legacy_c5381b8c-4526-56fe-878c-7526da26c51d",
          "subject_kind": "principal",
          "subject_id": "prn_legacy_email_7b5bf272-82ee-53a9-9bf2-3d1c970615d4",
          "resource_kind": "repository",
          "resource_id": "repo_wheelie_keebdisplay",
          "capability": "export",
          "source_kind": "direct",
          "created_at": "2026-05-24T02:00:00Z"
        },
        {
          "grant_id": "gr_legacy_68b272df-55fd-5dcd-9159-afcc98d1e00b",
          "subject_kind": "principal",
          "subject_id": "prn_legacy_email_7b5bf272-82ee-53a9-9bf2-3d1c970615d4",
          "resource_kind": "repository",
          "resource_id": "repo_wheelie_keebdisplay",
          "capability": "read",
          "source_kind": "direct",
          "created_at": "2026-05-24T02:00:00Z"
        },
        {
          "grant_id": "gr_legacy_e609b930-0bc1-5765-926a-279db527588f",
          "subject_kind": "principal",
          "subject_id": "prn_legacy_email_7b5bf272-82ee-53a9-9bf2-3d1c970615d4",
          "resource_kind": "repository",
          "resource_id": "repo_wheelie_keebdisplay",
          "capability": "write",
          "source_kind": "direct",
          "created_at": "2026-05-24T02:00:00Z"
        }
      ]
    },
    "principal_audits": [
      {
        "principal": "cross-org-attacker@example.invalid",
        "effective_access": {
          "principal": "cross-org-attacker@example.invalid",
          "repository_id": "repo_wheelie_keebdisplay",
          "decision": "deny",
          "reasons": [
            {
              "kind": "repository_access_policy_deny",
              "repository_grant": {
                "repository_id": "repo_wheelie_keebdisplay",
                "principal": "cross-org-attacker@example.invalid",
                "role": "owner",
                "source": "direct",
                "created_at": "2026-05-24T02:00:00Z",
                "updated_at": "2026-05-24T02:00:00Z"
              },
              "access_policy": "org_member_explicit_grants"
            }
          ]
        },
        "capability_checks": [
          {
            "effective_access": {
              "principal": "cross-org-attacker@example.invalid",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "deny",
              "reasons": [
                {
                  "kind": "repository_access_policy_deny",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "cross-org-attacker@example.invalid",
                    "role": "owner",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "access_policy": "org_member_explicit_grants"
                }
              ]
            },
            "requested_capability": "read",
            "allowed": false
          },
          {
            "effective_access": {
              "principal": "cross-org-attacker@example.invalid",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "deny",
              "reasons": [
                {
                  "kind": "repository_access_policy_deny",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "cross-org-attacker@example.invalid",
                    "role": "owner",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "access_policy": "org_member_explicit_grants"
                }
              ]
            },
            "requested_capability": "write",
            "allowed": false
          },
          {
            "effective_access": {
              "principal": "cross-org-attacker@example.invalid",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "deny",
              "reasons": [
                {
                  "kind": "repository_access_policy_deny",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "cross-org-attacker@example.invalid",
                    "role": "owner",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "access_policy": "org_member_explicit_grants"
                }
              ]
            },
            "requested_capability": "admin",
            "allowed": false
          },
          {
            "effective_access": {
              "principal": "cross-org-attacker@example.invalid",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "deny",
              "reasons": [
                {
                  "kind": "repository_access_policy_deny",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "cross-org-attacker@example.invalid",
                    "role": "owner",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "access_policy": "org_member_explicit_grants"
                }
              ]
            },
            "requested_capability": "export",
            "allowed": false
          }
        ]
      },
      {
        "principal": "maintainer@keebdisplay.example",
        "effective_access": {
          "principal": "maintainer@keebdisplay.example",
          "repository_id": "repo_wheelie_keebdisplay",
          "decision": "allow",
          "effective_role": "owner",
          "allowed_capabilities": [
            "read",
            "write",
            "admin",
            "export"
          ],
          "reasons": [
            {
              "kind": "repository_role_grant",
              "repository_grant": {
                "repository_id": "repo_wheelie_keebdisplay",
                "principal": "maintainer@keebdisplay.example",
                "role": "owner",
                "source": "direct",
                "created_at": "2026-05-24T02:00:00Z",
                "updated_at": "2026-05-24T02:00:00Z"
              },
              "projected_grants": [
                {
                  "grant_id": "gr_legacy_4b11c4c8-4d4c-504f-942b-3960f915825d",
                  "subject_kind": "principal",
                  "subject_id": "maintainer@keebdisplay.example",
                  "resource_kind": "repository",
                  "resource_id": "repo_wheelie_keebdisplay",
                  "capability": "read",
                  "source_kind": "direct",
                  "created_at": "2026-05-24T02:00:00Z"
                },
                {
                  "grant_id": "gr_legacy_16e0e5d1-932b-5693-ab41-0b80ffbe52d4",
                  "subject_kind": "principal",
                  "subject_id": "maintainer@keebdisplay.example",
                  "resource_kind": "repository",
                  "resource_id": "repo_wheelie_keebdisplay",
                  "capability": "write",
                  "source_kind": "direct",
                  "created_at": "2026-05-24T02:00:00Z"
                },
                {
                  "grant_id": "gr_legacy_6f681475-836c-51f5-88bb-ac9b6be68213",
                  "subject_kind": "principal",
                  "subject_id": "maintainer@keebdisplay.example",
                  "resource_kind": "repository",
                  "resource_id": "repo_wheelie_keebdisplay",
                  "capability": "admin",
                  "source_kind": "direct",
                  "created_at": "2026-05-24T02:00:00Z"
                },
                {
                  "grant_id": "gr_legacy_86601cd2-fb5f-5dad-a99a-2fd6a79c8208",
                  "subject_kind": "principal",
                  "subject_id": "maintainer@keebdisplay.example",
                  "resource_kind": "repository",
                  "resource_id": "repo_wheelie_keebdisplay",
                  "capability": "export",
                  "source_kind": "direct",
                  "created_at": "2026-05-24T02:00:00Z"
                }
              ]
            }
          ]
        },
        "capability_checks": [
          {
            "effective_access": {
              "principal": "maintainer@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "allow",
              "effective_role": "owner",
              "allowed_capabilities": [
                "read",
                "write",
                "admin",
                "export"
              ],
              "reasons": [
                {
                  "kind": "repository_role_grant",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "maintainer@keebdisplay.example",
                    "role": "owner",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "projected_grants": [
                    {
                      "grant_id": "gr_legacy_4b11c4c8-4d4c-504f-942b-3960f915825d",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "read",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_16e0e5d1-932b-5693-ab41-0b80ffbe52d4",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "write",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_6f681475-836c-51f5-88bb-ac9b6be68213",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "admin",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_86601cd2-fb5f-5dad-a99a-2fd6a79c8208",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "export",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    }
                  ]
                }
              ]
            },
            "requested_capability": "read",
            "allowed": true
          },
          {
            "effective_access": {
              "principal": "maintainer@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "allow",
              "effective_role": "owner",
              "allowed_capabilities": [
                "read",
                "write",
                "admin",
                "export"
              ],
              "reasons": [
                {
                  "kind": "repository_role_grant",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "maintainer@keebdisplay.example",
                    "role": "owner",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "projected_grants": [
                    {
                      "grant_id": "gr_legacy_4b11c4c8-4d4c-504f-942b-3960f915825d",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "read",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_16e0e5d1-932b-5693-ab41-0b80ffbe52d4",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "write",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_6f681475-836c-51f5-88bb-ac9b6be68213",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "admin",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_86601cd2-fb5f-5dad-a99a-2fd6a79c8208",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "export",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    }
                  ]
                }
              ]
            },
            "requested_capability": "write",
            "allowed": true
          },
          {
            "effective_access": {
              "principal": "maintainer@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "allow",
              "effective_role": "owner",
              "allowed_capabilities": [
                "read",
                "write",
                "admin",
                "export"
              ],
              "reasons": [
                {
                  "kind": "repository_role_grant",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "maintainer@keebdisplay.example",
                    "role": "owner",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "projected_grants": [
                    {
                      "grant_id": "gr_legacy_4b11c4c8-4d4c-504f-942b-3960f915825d",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "read",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_16e0e5d1-932b-5693-ab41-0b80ffbe52d4",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "write",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_6f681475-836c-51f5-88bb-ac9b6be68213",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "admin",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_86601cd2-fb5f-5dad-a99a-2fd6a79c8208",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "export",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    }
                  ]
                }
              ]
            },
            "requested_capability": "admin",
            "allowed": true
          },
          {
            "effective_access": {
              "principal": "maintainer@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "allow",
              "effective_role": "owner",
              "allowed_capabilities": [
                "read",
                "write",
                "admin",
                "export"
              ],
              "reasons": [
                {
                  "kind": "repository_role_grant",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "maintainer@keebdisplay.example",
                    "role": "owner",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "projected_grants": [
                    {
                      "grant_id": "gr_legacy_4b11c4c8-4d4c-504f-942b-3960f915825d",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "read",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_16e0e5d1-932b-5693-ab41-0b80ffbe52d4",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "write",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_6f681475-836c-51f5-88bb-ac9b6be68213",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "admin",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    },
                    {
                      "grant_id": "gr_legacy_86601cd2-fb5f-5dad-a99a-2fd6a79c8208",
                      "subject_kind": "principal",
                      "subject_id": "maintainer@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "export",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    }
                  ]
                }
              ]
            },
            "requested_capability": "export",
            "allowed": true
          }
        ]
      },
      {
        "principal": "reader@keebdisplay.example",
        "effective_access": {
          "principal": "reader@keebdisplay.example",
          "repository_id": "repo_wheelie_keebdisplay",
          "decision": "allow",
          "effective_role": "reader",
          "allowed_capabilities": [
            "read"
          ],
          "reasons": [
            {
              "kind": "repository_role_grant",
              "repository_grant": {
                "repository_id": "repo_wheelie_keebdisplay",
                "principal": "reader@keebdisplay.example",
                "role": "reader",
                "source": "direct",
                "created_at": "2026-05-24T02:00:00Z",
                "updated_at": "2026-05-24T02:00:00Z"
              },
              "projected_grants": [
                {
                  "grant_id": "gr_legacy_320c76bf-59d1-5a6e-b614-0349ec7799d6",
                  "subject_kind": "principal",
                  "subject_id": "reader@keebdisplay.example",
                  "resource_kind": "repository",
                  "resource_id": "repo_wheelie_keebdisplay",
                  "capability": "read",
                  "source_kind": "direct",
                  "created_at": "2026-05-24T02:00:00Z"
                }
              ]
            }
          ]
        },
        "capability_checks": [
          {
            "effective_access": {
              "principal": "reader@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "allow",
              "effective_role": "reader",
              "allowed_capabilities": [
                "read"
              ],
              "reasons": [
                {
                  "kind": "repository_role_grant",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "reader@keebdisplay.example",
                    "role": "reader",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "projected_grants": [
                    {
                      "grant_id": "gr_legacy_320c76bf-59d1-5a6e-b614-0349ec7799d6",
                      "subject_kind": "principal",
                      "subject_id": "reader@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "read",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    }
                  ]
                }
              ]
            },
            "requested_capability": "read",
            "allowed": true
          },
          {
            "effective_access": {
              "principal": "reader@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "allow",
              "effective_role": "reader",
              "allowed_capabilities": [
                "read"
              ],
              "reasons": [
                {
                  "kind": "repository_role_grant",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "reader@keebdisplay.example",
                    "role": "reader",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "projected_grants": [
                    {
                      "grant_id": "gr_legacy_320c76bf-59d1-5a6e-b614-0349ec7799d6",
                      "subject_kind": "principal",
                      "subject_id": "reader@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "read",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    }
                  ]
                }
              ]
            },
            "requested_capability": "write",
            "allowed": false
          },
          {
            "effective_access": {
              "principal": "reader@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "allow",
              "effective_role": "reader",
              "allowed_capabilities": [
                "read"
              ],
              "reasons": [
                {
                  "kind": "repository_role_grant",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "reader@keebdisplay.example",
                    "role": "reader",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "projected_grants": [
                    {
                      "grant_id": "gr_legacy_320c76bf-59d1-5a6e-b614-0349ec7799d6",
                      "subject_kind": "principal",
                      "subject_id": "reader@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "read",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    }
                  ]
                }
              ]
            },
            "requested_capability": "admin",
            "allowed": false
          },
          {
            "effective_access": {
              "principal": "reader@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "allow",
              "effective_role": "reader",
              "allowed_capabilities": [
                "read"
              ],
              "reasons": [
                {
                  "kind": "repository_role_grant",
                  "repository_grant": {
                    "repository_id": "repo_wheelie_keebdisplay",
                    "principal": "reader@keebdisplay.example",
                    "role": "reader",
                    "source": "direct",
                    "created_at": "2026-05-24T02:00:00Z",
                    "updated_at": "2026-05-24T02:00:00Z"
                  },
                  "projected_grants": [
                    {
                      "grant_id": "gr_legacy_320c76bf-59d1-5a6e-b614-0349ec7799d6",
                      "subject_kind": "principal",
                      "subject_id": "reader@keebdisplay.example",
                      "resource_kind": "repository",
                      "resource_id": "repo_wheelie_keebdisplay",
                      "capability": "read",
                      "source_kind": "direct",
                      "created_at": "2026-05-24T02:00:00Z"
                    }
                  ]
                }
              ]
            },
            "requested_capability": "export",
            "allowed": false
          }
        ]
      },
      {
        "principal": "same-org-no-grant@keebdisplay.example",
        "effective_access": {
          "principal": "same-org-no-grant@keebdisplay.example",
          "repository_id": "repo_wheelie_keebdisplay",
          "decision": "deny",
          "reasons": [
            {
              "kind": "no_grant"
            }
          ]
        },
        "capability_checks": [
          {
            "effective_access": {
              "principal": "same-org-no-grant@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "deny",
              "reasons": [
                {
                  "kind": "no_grant"
                }
              ]
            },
            "requested_capability": "read",
            "allowed": false
          },
          {
            "effective_access": {
              "principal": "same-org-no-grant@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "deny",
              "reasons": [
                {
                  "kind": "no_grant"
                }
              ]
            },
            "requested_capability": "write",
            "allowed": false
          },
          {
            "effective_access": {
              "principal": "same-org-no-grant@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "deny",
              "reasons": [
                {
                  "kind": "no_grant"
                }
              ]
            },
            "requested_capability": "admin",
            "allowed": false
          },
          {
            "effective_access": {
              "principal": "same-org-no-grant@keebdisplay.example",
              "repository_id": "repo_wheelie_keebdisplay",
              "decision": "deny",
              "reasons": [
                {
                  "kind": "no_grant"
                }
              ]
            },
            "requested_capability": "export",
            "allowed": false
          }
        ]
      }
    ],
    "requested_capabilities": [
      "read",
      "write",
      "admin",
      "export"
    ],
    "acl_replay_pass": true,
    "grant_readback_available": true,
    "provider_identity_not_authority": true,
    "verified_actor_source": "verified_wheelie_gravity_principal_plus_source_acl_grant",
    "caller_supplied_identity_inputs_ignored": [
      "github_username",
      "github_email",
      "github_ref",
      "github_webhook_headers",
      "commit_author",
      "x_user_email_header"
    ],
    "redaction_status": "public_safe_redacted"
  },
  "public_authz_negatives": [
    {
      "case_id": "unauthenticated_private_fixture_read_denied",
      "method": "GET",
      "route_family": "hosted_source_private_fixture",
      "path_template": "/wheelie/source-kit/manifest.json",
      "auth_class": "private_read_before_approval",
      "actor_source": "none",
      "caller_supplied_identity_ignored": false,
      "caller_supplied_provider_ignored": false,
      "expected_status": 401,
      "observed_status": 401,
      "denied": true,
      "reason_code": "verified_runtime_session_or_wheelie_capability_required",
      "fail_closed": true,
      "public_denial_body_policy": "generic_no_private_repo_existence_or_provider_refs",
      "redaction_status": "public_safe_redacted",
      "no_private_provider_identifiers": true,
      "route_discovery_support_level": "private_or_preview"
    },
    {
      "case_id": "caller_supplied_github_identity_ignored_for_public_read",
      "method": "GET",
      "route_family": "hosted_source_public_selected_project",
      "path_template": "/repos/wheelie/keebdisplay/manifest.json",
      "auth_class": "public_read_approved_selected_project",
      "actor_source": "anonymous_public_read_policy",
      "caller_supplied_identity_ignored": true,
      "caller_supplied_provider_ignored": true,
      "expected_status": 200,
      "observed_status": 200,
      "denied": false,
      "reason_code": "public_read_does_not_use_caller_identity_as_acl_authority",
      "fail_closed": true,
      "public_denial_body_policy": "not_applicable_success_body_contains_public_read_policy_actor_source",
      "redaction_status": "public_safe_redacted",
      "no_private_provider_identifiers": true,
      "route_discovery_support_level": "native_public_read_selected_project"
    },
    {
      "case_id": "cross_org_repository_acl_denied",
      "method": "GET",
      "route_family": "source_acl_replay",
      "path_template": "/v1/repositories/{repository_id}",
      "auth_class": "verified_runtime_session_plus_source_acl_read",
      "actor_source": "verified_wheelie_gravity_principal",
      "caller_supplied_identity_ignored": true,
      "caller_supplied_provider_ignored": true,
      "expected_status": 403,
      "observed_status": 403,
      "denied": true,
      "reason_code": "source_acl_policy_denied_cross_org_principal",
      "fail_closed": true,
      "public_denial_body_policy": "typed receipt only; public route bodies omit principal and provider identifiers",
      "redaction_status": "public_safe_redacted",
      "no_private_provider_identifiers": true
    },
    {
      "case_id": "expired_capability_or_grant_denied",
      "method": "POST",
      "route_family": "hosted_source_public_selected_project_mutation",
      "path_template": "/repos/wheelie/keebdisplay/tasks",
      "auth_class": "authenticated_write_capability_required",
      "actor_source": "expired_or_revoked_capability",
      "caller_supplied_identity_ignored": true,
      "caller_supplied_provider_ignored": true,
      "expected_status": 401,
      "observed_status": 401,
      "denied": true,
      "reason_code": "expired_capability_not_authenticated",
      "fail_closed": true,
      "public_denial_body_policy": "generic_auth_required_no_private_provider_refs",
      "redaction_status": "public_safe_redacted",
      "no_private_provider_identifiers": true,
      "route_discovery_support_level": "unsupported_in_public_read_mvp"
    },
    {
      "case_id": "unsupported_public_mutation_denied_after_verified_read_session",
      "method": "POST",
      "route_family": "hosted_source_public_selected_project_mutation",
      "path_template": "/repos/wheelie/keebdisplay/tasks",
      "auth_class": "authenticated_write_capability_required",
      "actor_source": "verified_runtime_session_without_write_capability",
      "caller_supplied_identity_ignored": true,
      "caller_supplied_provider_ignored": true,
      "expected_status": 403,
      "observed_status": 403,
      "denied": true,
      "reason_code": "public_write_unsupported_in_static_public_read_projection",
      "fail_closed": true,
      "public_denial_body_policy": "generic_unsupported_mutation_no_private_provider_refs",
      "redaction_status": "public_safe_redacted",
      "no_private_provider_identifiers": true,
      "route_discovery_support_level": "unsupported_in_public_read_mvp"
    }
  ],
  "support_labels": {
    "github_identity": "adapter_evidence_not_source_acl_authority",
    "public_read": "native_public_read_selected_project",
    "public_writes": "unsupported_in_public_read_mvp",
    "source_authority": "gravity_source_shadow_public_read_github_authoritative"
  },
  "promotion_readiness": {
    "ready_for_public_read_claim": true,
    "ready_for_source_primary_promotion": false,
    "blocks_source_primary_promotion": true,
    "blocking_reasons": [
      "source-primary requires live CAS backup handles, jj lineage restore, mirror reconciliation, and managed isolated restore receipts outside this authz packet"
    ]
  }
}