{"id":"client-authorization","filename":"client-authorization.yaml","schema":"authorization","document":{"authorization_id":"AUTH-DEMO-2026-001","client_id":"client-demo","approved_by":"Demo Client Security Owner","valid_from":"2026-09-01T00:00:00-06:00","valid_until":"2026-10-01T23:59:59-06:00","allowed_modes":["inventory","audit","passive","change"],"targets":[{"kind":"domain","value":"security-demo.example.com","environments":["production"]},{"kind":"ip","value":"203.0.113.10","environments":["production"]},{"kind":"domain","value":"*.staging.security-demo.example.com","environments":["staging"]}],"limits":{"max_requests_per_second":1,"max_concurrency":1,"max_duration_minutes":15,"max_error_rate":0.05,"max_latency_ms":3000},"forbidden_actions":["denial-of-service","stress-testing","phishing","credential-guessing","persistence","data-exfiltration","production-active-scan"],"maintenance_windows":[{"start":"2026-09-10T22:00:00-06:00","end":"2026-09-10T23:00:00-06:00","description":"Approved VPS hardening window"}],"emergency_contact":"security-owner@security-demo.example.com","data_handling":{"classification":"confidential","retention_days":90,"region":"ca","redact":["authorization","cookie","password","api-key","personal-data"]},"proof_of_control":{"method":"dns-txt","status":"verified","verified_at":"2026-09-01T09:00:00-06:00","evidence_reference":"evidence://client-demo/ownership/dns-proof.json"},"signatures":[{"signer":"Demo Client Security Owner","signed_at":"2026-09-01T09:05:00-06:00","signature_reference":"signature://client-demo/AUTH-DEMO-2026-001"}]},"yaml":"authorization_id: AUTH-DEMO-2026-001\nclient_id: client-demo\napproved_by: Demo Client Security Owner\nvalid_from: \"2026-09-01T00:00:00-06:00\"\nvalid_until: \"2026-10-01T23:59:59-06:00\"\nallowed_modes:\n  - inventory\n  - audit\n  - passive\n  - change\ntargets:\n  - kind: domain\n    value: security-demo.example.com\n    environments: [production]\n  - kind: ip\n    value: 203.0.113.10\n    environments: [production]\n  - kind: domain\n    value: \"*.staging.security-demo.example.com\"\n    environments: [staging]\nlimits:\n  max_requests_per_second: 1\n  max_concurrency: 1\n  max_duration_minutes: 15\n  max_error_rate: 0.05\n  max_latency_ms: 3000\nforbidden_actions:\n  - denial-of-service\n  - stress-testing\n  - phishing\n  - credential-guessing\n  - persistence\n  - data-exfiltration\n  - production-active-scan\nmaintenance_windows:\n  - start: \"2026-09-10T22:00:00-06:00\"\n    end: \"2026-09-10T23:00:00-06:00\"\n    description: Approved VPS hardening window\nemergency_contact: security-owner@security-demo.example.com\ndata_handling:\n  classification: confidential\n  retention_days: 90\n  region: ca\n  redact:\n    - authorization\n    - cookie\n    - password\n    - api-key\n    - personal-data\nproof_of_control:\n  method: dns-txt\n  status: verified\n  verified_at: \"2026-09-01T09:00:00-06:00\"\n  evidence_reference: evidence://client-demo/ownership/dns-proof.json\nsignatures:\n  - signer: Demo Client Security Owner\n    signed_at: \"2026-09-01T09:05:00-06:00\"\n    signature_reference: signature://client-demo/AUTH-DEMO-2026-001\n"}