id: check:tenant-alpha-internal-note
subject:
  id: user:alice
  type: Human
  tenant: tenant:alpha
action: read
resource:
  id: document:internal-note
  type: document
  system: markitect-tool
  tenant: tenant:alpha
context:
  purpose: knowledge-base-read
  assurance:
    mfa: true
caring_context:
  id: descriptor:tenant-alpha-document-reader
  profile: caring-0.4.0-rc2
  subject_type: Human
  organization_relation: Customer
  canonical_role: Doer
  scope:
    level: Resource
    id: document:internal-note
    tenant: tenant:alpha
    resource: document:internal-note
  planes:
    - Data
  capabilities:
    - View
  exposure_modes:
    - Masked
    - Plaintext
  conditions:
    - PurposeBound
    - Logged
  lifecycle_state: Operate
  restrictions:
    - ExportBlocked
  access_path: direct
policy_version: markitect.documents.v1