scan

type PolicyException struct {
	Package       string   `json:"package"`
	Capabilities  []string `json:"capabilities"`
	Taint         []string `json:"taint"`         // e.g. ["network→exec", "env→exec"]
	Expires       string   `json:"expires"`       // ISO 8601 date "2026-06-01"
	Justification string   `json:"justification"` // why this exception exists
	Ticket        string   `json:"ticket"`        // optional ticket reference
}