relationship_request:
  subject: oidc:https://sso.example.test/realms/netkingdom#user-123
  relation: reader
  object_id: document:internal-note
  namespace: markitect/document
  context:
    action: query
    trust_zone: internal
    resource_path: examples/policy/private/internal-note.md
rule_request:
  subject:
    id: oidc:https://sso.example.test/realms/netkingdom#user-123
    roles:
      - viewer
    groups:
      - /markitect/readers
    assurance:
      mfa: true
  action: query
  object:
    id: document:internal-note
    type: document
    labels:
      - internal
    trust_zone: internal
  context:
    policy_map_id: markitect-enterprise-policy-map
    workflow_id: assisted-review-boundary