security-policy-testing
Test authorization, admission, and infrastructure policies using adversarial fixtures and regression gates.
Source facts
- Repository
- Lucatronlk/justsec-agent-kit
- Last source activity
- November 5, 2026 at 11:03
- Detected SKILL.md language
- English
- Stars
- 0
- Forks
- 0
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Showing SKILL.md
SKILL.md
Source instructions · Read-only preview- name
- security-policy-testing
- description
- Test authorization, admission, and infrastructure policies using adversarial fixtures and regression gates.
- license
- MIT
- metadata
- {"author":"justsec-agent-kit contributors","source":"original"}
# Security Policy Testing
## Inputs
Policy definitions, trust model, approved access matrix, sample resources, exception inventory, and enforcement mode.
## Workflow
1. Turn each requirement into allowed, denied, missing-attribute, and boundary test cases.
2. Add tests for wildcard access, inheritance, expired exceptions, malformed input, and policy conflicts.
3. Run deterministic tests in CI plus staged shadow decisions; compare changes against baseline and owner sign-off.
4. Gate enforcement on zero critical false allows and understood false denies.
## Validation
Prove tests fail under a deliberately weakened policy; audit exception expiry and log redaction.
## Rollback and safety
Do not change enforcement mode in production without approval. Preserve last-good policy and revert on legitimate access regression; never use live credentials or sensitive user data in fixtures.
View on GitHub