[
  {
    "id": "POL-SEC-001",
    "name": "Production SSH Access Control",
    "category": "Security",
    "version": "1.0.0",
    "owner": "EOS Team",
    "status": "Active",
    "acceptanceTests": [
      "S-001"
    ],
    "regressionTests": true,
    "evidence": "Runtime Trace",
    "lastVerified": "2026-07-01",
    "rule": "no-ssh-prod",
    "description": "SSH-åtkomst till produktion är förbjuden. Alla ändringar måste gå via godkänd pipeline."
  },
  {
    "id": "POL-SEC-002",
    "name": "Hardcoded Secrets Prevention",
    "category": "Security",
    "version": "1.0.0",
    "owner": "EOS Team",
    "status": "Active",
    "acceptanceTests": [
      "S-004"
    ],
    "regressionTests": true,
    "evidence": "Runtime Trace",
    "lastVerified": "2026-07-01",
    "rule": "no-hardcoded-secrets",
    "description": "Hemligheter får aldrig lagras i källkod. Använd AWS Secrets Manager eller motsvarande."
  },
  {
    "id": "POL-DEP-001",
    "name": "Pipeline Required for Production Deployment",
    "category": "Deployment",
    "version": "1.0.0",
    "owner": "EOS Team",
    "status": "Active",
    "acceptanceTests": [
      "S-003"
    ],
    "regressionTests": true,
    "evidence": "Runtime Trace",
    "lastVerified": "2026-07-01",
    "rule": "pipeline-required",
    "description": "Deployment till produktion kräver godkänd CI/CD-pipeline."
  },
  {
    "id": "POL-DAT-001",
    "name": "Production Data Modification Control",
    "category": "Data",
    "version": "1.0.0",
    "owner": "EOS Team",
    "status": "Active",
    "acceptanceTests": [
      "S-002"
    ],
    "regressionTests": true,
    "evidence": "Runtime Trace",
    "lastVerified": "2026-07-01",
    "rule": "no-direct-production-db-write",
    "description": "Okontrollerade förändringar av persistent data är förbjudna. Använd godkänd migreringsprocess."
  },
  {
    "id": "POL-INFRA-001",
    "name": "Production Infrastructure Change Control",
    "category": "Infrastructure",
    "version": "1.0.0",
    "owner": "EOS Team",
    "status": "Active",
    "acceptanceTests": [
      "S-005"
    ],
    "regressionTests": true,
    "evidence": "Runtime Trace",
    "lastVerified": "2026-07-01",
    "rule": "no-unapproved-infra-change",
    "description": "Förändring av produktionsinfrastruktur kräver godkänd Infrastructure-as-Code-process."
  }
]