# CASAN H5 — Reviewer identity registry (Approval-identity MVP · C4).
#
# Binds an approver id to a ROLE and a PUBLIC key. Under CASAN_APPROVAL_STRICT=1,
# governance-check.sh trusts an approval ONLY if it is signed by the private key
# matching one of these public keys, and the reviewer's role is authorized for
# the action (see the `action` lines).
#
# Line format (no yaml dependency):
#   reviewer <id> <role> <pubkey-file>          # pubkey-file relative to reviewers/ dir
#   action   <action-name|default> <comma,roles>
#
# Reviewer PRIVATE keys live OFF-REPO (with the reviewer / issued by an IdP) —
# only PUBLIC keys are provisioned here, same policy as the audit signing key.
# Production: replace this static registry + local pubkeys with OIDC/JWT identity
# from a real IdP (verify token signature + role/exp claims).

reviewer security-lead   security       security-lead.pub.pem
reviewer tech-lead       tech_lead      tech-lead.pub.pem
reviewer ops-owner       ops            ops-owner.pub.pem
reviewer project-owner   project_owner  project-owner.pub.pem

# Which role may approve which action class.
action deploy      ops,security
action migration   tech_lead,security
action db_write    tech_lead,security
action write_code  tech_lead,security
action policy_change security
action default     tech_lead,ops,security,project_owner