feat: seed Lariza feature demonstration

Add synthetic fixtures and proposed policy contracts for safely demonstrating future Lariza capabilities. Assisted-by: Codex: GPT-5.6
2026-07-18 20:21:37 +08:00
commit 1aa5b38eb3
5 changed files with 87 additions and 0 deletions
@@ -0,0 +1,22 @@
+apiVersion: actions.lariza.dev/v1alpha1
+kind: RunnerPolicyIntent
+metadata:
+  name: unprivileged-demo
+spec:
+  mode: audit
+  allowedLabels: [lariza-test]
+  protectedLabels: [image-build, talos-deploy]
+  actionSources:
+    allow:
+      - github.com/actions/checkout
+    requireImmutableReferences: true
+  tokenPermissions:
+    default: {contents: read}
+    maximum: {contents: read, issues: write}
+  concurrency:
+    repositoryMaximum: 1
+  schedules:
+    enabled: false
+  secrets:
+    allowForkPullRequests: false
+    requireEnvironmentApproval: true