# SPDX-License-Identifier: Apache-2.0
# yaml-language-server: $schema=https://nika.sh/spec/v1/workflow.schema.json
#
# 11 · The lift — the one door through the taint.
#
# A permit-relevant argument fed by an UNTRUSTED value (`inputs.*` ·
# `config.*` · anything fetched) is the parameterisation taint. When the
# check can resolve the value and it ESCAPES the bound, it refuses with
# `NIKA-AUTH-008` — and the reflex that refusal provokes (widen the
# boundary until the message stops) is the wrong door. The right one is
# authored: a `lift:` entry naming the **taint** law on the task, with a
# reviewable `because:`
# (spec/10-authority.md · "The only door is the authored one").
#
# Demonstrates · every claim below was run against this exact file
#   - the wall · flip this file's `default:` to "../outside/secrets.csv"
#     and the check refuses ✖ NIKA-AUTH-008; the door below turns that
#     SAME variant check-green — the static question is deferred, not
#     answered
#   - never a bypass · that deferred variant still dies `NIKA-SEC-004` at
#     run, and `--var path=README.md` on THIS file dies the same way — the
#     boundary confines every value, door or no door
#     (spec/10-authority.md · "It is never a permit bypass")
#   - `lift:` · task-level · `law:` a closed enum (`taint` here) · `from:`
#     a dotted binding, required by `taint` and forbidden elsewhere ·
#     `because:` non-empty, the review record
#   - what the door yields on an ADMITTED value · the vouching lands in
#     the signed trace — one `lift` frame per entry, holding the
#     `because:`
#   - a wall with no door at all · a permit BOUND can never interpolate
#     (`NIKA-AUTH-007` · a bound is a literal you can read)
#
# Run · nika run examples/11-declassify-the-door.nika.yaml
#   another vendor file · --var path=examples/fixtures/orders.csv

nika: declassify-the-door

permits:
  tools: ["nika:jq", "nika:read"]
  fs:
    # The bound is the DOMAIN the operator grants: any fixture csv, one
    # path segment, nothing nested. `*` never crosses `/` — a caller aiming
    # at `fixtures/deep/x.csv` or `../secrets.csv` is refused by the
    # boundary itself, before the taint question even comes up.
    read: ["examples/fixtures/*.csv"]

inputs:
  path:
    type: string
    default: "examples/fixtures/inventory-q3.csv"
    required: true
    description: "WHICH vendor csv to load · must sit inside the fs.read bound"

tasks:
  load:
    invoke:
      tool: "nika:read"
      args:
        path: "${{ inputs.path }}"
    # The door. `law:` names WHICH law this entry lifts; `from:` names the
    # exact tainted binding; `because:` is the sentence a reviewer holds
    # you to. What it buys, measured: a resolvable ESCAPING value stops
    # refusing at check (the question is handed to the run), and every run
    # writes one `lift` frame into the signed trace carrying this exact
    # sentence. What it does not buy, measured: the boundary — an
    # out-of-bound path dies `NIKA-SEC-004` at run with the door in place.
    lift:
      - law: taint
        from: inputs.path
        because: "the caller picks WHICH fixture csv, never an arbitrary path — the one-segment *.csv bound confines every value this input can take, and the run refuses anything outside it"

  shape:
    with:
      raw: ${{ tasks.load.output }}
    invoke:
      tool: "nika:jq"
      args:
        input: "${{ with.raw }}"
        expression: '{rows: (split("\n") | map(select(. != "")) | length - 1)}'

outputs:
  summary:
    value: ${{ tasks.shape.output }}
    description: "How many data rows the vendor file carries (header excluded)"

the path · 11

The lift — the one door through the taint.

run itnika try 11-declassify-the-door

11-declassify-the-door.nika.yamlsource

1# SPDX-License-Identifier: Apache-2.02# yaml-language-server: $schema=https://nika.sh/spec/v1/workflow.schema.json3#4# 11 · The lift — the one door through the taint.5#6# A permit-relevant argument fed by an UNTRUSTED value (`inputs.*` ·7# `config.*` · anything fetched) is the parameterisation taint. When the8# check can resolve the value and it ESCAPES the bound, it refuses with9# `NIKA-AUTH-008` — and the reflex that refusal provokes (widen the10# boundary until the message stops) is the wrong door. The right one is11# authored: a `lift:` entry naming the **taint** law on the task, with a12# reviewable `because:`13# (spec/10-authority.md · "The only door is the authored one").14#15# Demonstrates · every claim below was run against this exact file16#   - the wall · flip this file's `default:` to "../outside/secrets.csv"17#     and the check refuses ✖ NIKA-AUTH-008; the door below turns that18#     SAME variant check-green — the static question is deferred, not19#     answered20#   - never a bypass · that deferred variant still dies `NIKA-SEC-004` at21#     run, and `--var path=README.md` on THIS file dies the same way — the22#     boundary confines every value, door or no door23#     (spec/10-authority.md · "It is never a permit bypass")24#   - `lift:` · task-level · `law:` a closed enum (`taint` here) · `from:`25#     a dotted binding, required by `taint` and forbidden elsewhere ·26#     `because:` non-empty, the review record27#   - what the door yields on an ADMITTED value · the vouching lands in28#     the signed trace — one `lift` frame per entry, holding the29#     `because:`30#   - a wall with no door at all · a permit BOUND can never interpolate31#     (`NIKA-AUTH-007` · a bound is a literal you can read)32#33# Run · nika run examples/11-declassify-the-door.nika.yaml34#   another vendor file · --var path=examples/fixtures/orders.csv3536nika: declassify-the-door3738⛨permits:39  ⛨tools: ["nika:jq", "nika:read"]40  ⛨fs:41    # The bound is the DOMAIN the operator grants: any fixture csv, one42    # path segment, nothing nested. `*` never crosses `/` — a caller aiming43    # at `fixtures/deep/x.csv` or `../secrets.csv` is refused by the44    # boundary itself, before the taint question even comes up.45    ⛨read: ["examples/fixtures/*.csv"]4647inputs:48  path:49    type: string50    default: "examples/fixtures/inventory-q3.csv"51    required: true52    description: "WHICH vendor csv to load · must sit inside the fs.read bound"5354tasks:55  load:56    ◆invoke:57      tool: "nika:read"58      args:59        path: "${{ inputs.path }}"60    # The door. `law:` names WHICH law this entry lifts; `from:` names the61    # exact tainted binding; `because:` is the sentence a reviewer holds62    # you to. What it buys, measured: a resolvable ESCAPING value stops63    # refusing at check (the question is handed to the run), and every run64    # writes one `lift` frame into the signed trace carrying this exact65    # sentence. What it does not buy, measured: the boundary — an66    # out-of-bound path dies `NIKA-SEC-004` at run with the door in place.67    lift:68      - law: taint69        from: inputs.path70        because: "the caller picks WHICH fixture csv, never an arbitrary path — the one-segment *.csv bound confines every value this input can take, and the run refuses anything outside it"7172  shape:73    with:74      raw: ${{ tasks.load.output }}75    ◆invoke:76      tool: "nika:jq"77      args:78        input: "${{ with.raw }}"79        expression: '{rows: (split("\n") | map(select(. != "")) | length - 1)}'8081outputs:82  summary:83    value: ${{ tasks.shape.output }}84    description: "How many data rows the vendor file carries (header excluded)"85

nika-spec@2b3d6ac3e · sha256 b18bdb82cab04c5e…