How a report becomes a case, and why you can check every step.

policies/agent-tools.cedar

// CivicProof · authorization policy for the investigation agent
//
// Evaluated by the Strands Agents CedarAuthorization intervention before EVERY tool call
// the model makes (Gemini, Amazon Nova on Bedrock, or the rules planner).
//   principal : Agent::"investigator"
//   action    : Action::"<tool name>"
//   context   : { input: <tool arguments>, session: { call_count, candidate_ids, ... } }
// Anything not permitted here is denied, and the denial is shown in the case trace.

// Research tools only read the public-records corpus.
@id("research-tools")
permit (
  principal == Agent::"investigator",
  action in [
    Action::"get_case_report",
    Action::"find_projects_near",
    Action::"find_projects_by_name",
    Action::"list_project_documents",
    Action::"search_documents",
    Action::"read_document_page"
  ],
  resource
);

// Keep project search local to the report: no radius above 2 km.
@id("bounded-radius")
forbid (principal, action == Action::"find_projects_near", resource)
when { context.input has radius_m && context.input.radius_m > 2000 };

// Live public records: search the official portals, and fetch only a record a search returned.
// Both are capped per run; every fetch is archived with its URL, time and SHA-256.
@id("public-records-search")
permit (principal == Agent::"investigator", action == Action::"search_public_records", resource)
when { context.session.live_searches < 6 };

@id("fetch-only-found-records")
permit (principal == Agent::"investigator", action == Action::"fetch_public_record", resource)
when {
  context.session.found_record_ids.contains(context.input.record_id) &&
  context.session.live_fetches < 6
};

// The agent may only link a case to a project a search returned (by location or by name), or a record it fetched.
@id("select-only-located-candidates")
permit (principal == Agent::"investigator", action == Action::"select_project", resource)
when { context.session.candidate_ids.contains(context.input.project_id) };

// Findings are proposals: the grounding verifier decides what they are worth.
@id("record-findings")
permit (
  principal == Agent::"investigator",
  action in [
    Action::"record_claim",
    Action::"flag_missing",
    Action::"propose_next_action",
    Action::"finish"
  ],
  resource
);

// A claim attributed to an official record must cite one.
@id("official-claims-need-citations")
forbid (principal, action == Action::"record_claim", resource)
when {
  context.input.origin == "official_record" &&
  (!(context.input has citations) || context.input.citations.isEmpty())
};

// Per-run budgets so a looping model cannot run up the Bedrock bill.
@id("reading-budget")
forbid (principal, action == Action::"read_document_page", resource)
when { context.session.call_count > 24 };

@id("claim-budget")
forbid (principal, action == Action::"record_claim", resource)
when { context.session.call_count > 30 };

@id("search-budget")
forbid (principal, action == Action::"search_documents", resource)
when { context.session.call_count > 16 };

policies/case-actions.cedar

// CivicProof · authorization policy for actions on a case
//
// Evaluated by the API (lib/authz.ts) before any state change.
//   principal : Public::"anonymous" | Reporter::"<case id>" (holds the owner key) | Agent::"investigator"
//   action    : ViewCase | CreateCase | StartInvestigation | RecordSubmission | RecordResponse
//               | AddNote | EditPacket | AddEvidence | ViewPrivateDocument | ViewPrivateDetails | ChangeStatus
//   resource  : Case::"<case id>"
//   context   : { is_owner, to_status, runs_for_case, max_runs_per_case, runs_today, max_runs_per_day }

@id("public-read-and-report")
permit (principal, action in [Action::"ViewCase", Action::"CreateCase"], resource);

// Investigating only reads public records, so anyone may start one, within budget.
@id("investigate-within-budget")
permit (principal, action == Action::"StartInvestigation", resource)
when {
  context.runs_for_case < context.max_runs_per_case &&
  context.runs_today < context.max_runs_per_day
};

// Only the person who filed the report records what happened in the real world.
@id("owner-records-real-world-actions")
permit (
  principal is Reporter,
  action in [
    Action::"RecordSubmission",
    Action::"RecordResponse",
    Action::"AddNote",
    Action::"EditPacket",
    Action::"AddEvidence",
    Action::"ViewPrivateDocument",
    Action::"ViewPrivateDetails",
    Action::"ChangeStatus"
  ],
  resource
)
when { context.is_owner };

// The agent may move a case through investigation states and nowhere else.
@id("agent-investigation-states")
permit (principal == Agent::"investigator", action == Action::"ChangeStatus", resource)
when { ["investigating", "evidence_found", "case_prepared"].contains(context.to_status) };

// Nobody except the reporter can say a case was filed, answered, inspected, acted on,
// resolved, disputed or closed. Each of those is a fact about the world outside this system,
// and CivicProof has no way to observe any of them.
// This holds even if a future policy above is written too broadly.
@id("only-reporter-closes-the-loop")
forbid (principal, action == Action::"ChangeStatus", resource)
when { ["submitted", "awaiting_response", "response_received", "inspection_reported", "action_reported", "resolved", "disputed", "closed"].contains(context.to_status) }
unless { principal is Reporter && context.is_owner };