The operator/bundle example is a good reminder to check the level of each subject, not just PASSED. A policy requiring level 3 for both should reject the level-1 bundle even when the operator passes. That case deserves a regression test in verifier integrations.
14
Clear post. Having both verification paths written out in full makes it easy to try against the SPO image today.
8
Load more replies