version: 1.0
bundle_id: casan-okr-harness-policy
owner: ai-governance-board
description: Central policy bundle for CASAN Level 5 governance

policies:
  - id: h4-prompt-filter
    path: packages/casan-harness/security/prompt-filter.yaml
    owner: security-team
    required: true

  - id: h4-output-policy
    path: packages/casan-harness/security/output-policy.yaml
    owner: security-team
    required: true

  - id: h5-approval-flow
    path: packages/casan-harness/governance/approval-flow.yaml
    owner: governance-team
    required: true

  - id: h5-risk-registry
    path: packages/casan-harness/governance/risk-registry.yaml
    owner: governance-team
    required: true

  - id: h6-metrics
    path: packages/casan-harness/agentops/metrics.yaml
    owner: agentops-team
    required: true

  - id: l5-tool-registry
    path: packages/casan-harness/level5/tool-registry.yaml
    owner: platform-team
    required: true

  - id: l5-fallback
    path: packages/casan-harness/level5/model-fallback.yaml
    owner: platform-team
    required: true

  - id: l5-drift
    path: packages/casan-harness/level5/drift-policy.yaml
    owner: quality-team
    required: true

approval:
  signing_required: true
  approver_group: ai-governance-board
  verification_script: .specify/scripts/bash/sign-policy-bundle.sh

evidence:
  manifest: .specify/level5/central-governance/policy-manifest.json
  signature: .specify/level5/central-governance/policy-manifest.sig
  public_key: .specify/level5/central-governance/policy-public.pem