{"file":"docs/seed/Cascading_Permissions_Model.txt","start":22,"end":69,"lines":[{"number":22,"text":"Owner-set Primary Author policy"},{"number":23,"text":""},{"number":24,"text":"When an Owner mints a Primary Author, the policy has seven layers:"},{"number":25,"text":""},{"number":26,"text":"Layer 1: Self permissions"},{"number":27,"text":""},{"number":28,"text":"What the Primary Author may do directly."},{"number":29,"text":""},{"number":30,"text":"Layer 2: Self resource scope"},{"number":31,"text":""},{"number":32,"text":"Which branches, namespaces, objects, recipients, and resources it may affect."},{"number":33,"text":""},{"number":34,"text":"Layer 3: Child-type minting"},{"number":35,"text":""},{"number":36,"text":"Whether it may mint:"},{"number":37,"text":""},{"number":38,"text":"Additional Primary Authors."},{"number":39,"text":"Secondary Authors."},{"number":40,"text":"Use Keys."},{"number":41,"text":"Keyring Keys."},{"number":42,"text":"Layer 4: Child permission ceilings"},{"number":43,"text":""},{"number":44,"text":"The maximum permissions it may give each child type."},{"number":45,"text":""},{"number":46,"text":"Layer 5: Child propagation ceilings"},{"number":47,"text":""},{"number":48,"text":"Which permissions those children may delegate onward."},{"number":49,"text":""},{"number":50,"text":"Layer 6: Operational constraints"},{"number":51,"text":"Expiration."},{"number":52,"text":"Maximum children."},{"number":53,"text":"Maximum depth."},{"number":54,"text":"Rate limits."},{"number":55,"text":"Audiences."},{"number":56,"text":"Environments."},{"number":57,"text":"Approval requirements."},{"number":58,"text":"Network conditions."},{"number":59,"text":"Required signature combinations."},{"number":60,"text":"Layer 7: Security responses"},{"number":61,"text":""},{"number":62,"text":"What the Key may:"},{"number":63,"text":""},{"number":64,"text":"Suspend."},{"number":65,"text":"Quarantine."},{"number":66,"text":"Rotate."},{"number":67,"text":"Revoke."},{"number":68,"text":"Report."},{"number":69,"text":"Freeze."}]}