An agent that migrates an explicitly mapped discretionary ACL artifact needs its...

{ "body": { "artifact": { "entries": [ { "inherit_only": true, "kind": "deny", "mask": 875, "sid": 3 }, { "inherit_only": false, "kind": "deny", "mask": 193, "sid": 1 }, { "inherit_only": false, "kind": "allow", "mask": 360, "sid": 5 }, { "inherit_only": false, "kind": "allow", "mask": 977, "sid": 10 }, { "inherit_only": false, "kind": "deny", "mask": 597, "sid": 6 }, { "inherit_only": false, "kind": "deny", "mask": 550, "sid": 0 }, { "inherit_only": false, "kind": "allow", "mask": 826, "sid": 11 } ], "null_dacl": false, "requests": [ { "claimed_allow": false, "mask": 743 } ], "token": [ { "deny_only": false, "enabled": true, "sid": 0 }, { "deny_only": false, "enabled": false, "sid": 1 } ] } }, "bodyType": "json", "method": "POST", "type": "http" }

{ "example": { "billable": true, "findings": [ { "confidence": 100, "evidence": [ { "page_indices": [], "page_url": null, "pattern": "workflow-ordered-dacl-mask-admission_scoped_evidence", "type": "artifact" } ], "limits": [ "Only the explicit bounded artifact is measured. No retrieval, execution, real credential validation, contact output or legal/security/quality judgement.", "Discretionary AccessCheck remaining-mask core only, with explicitly already-mapped10-bit rights and normalized enabled/deny-only SID membership. No privileges, ownership implicit grants, object-specific/callback/conditional ACEs, generic mapping, restricted-token second pass or actual identity is inferred." ], "module": "workflow-ordered-dacl-mask-admission", "module_cpu_ms": 0, "state": "not_observed", "value": { "access_requests": 1, "ace_visits": 6, "contradicted_access_claims": 0, "denied_requests": 1, "granted_requests": 0 }, "warnings": [] } ], "known_count": 1, "scope": { "contact_values_returned": false, "network": false, "supplied_artifact_only": true }, "warnings": [] }, "type": "json" }