{
  "generatedBy": "accessledger sample generator",
  "note": "This is a real run of the product pipeline over a fictional tenant. The company, people, projects and spaces are invented; the findings, the permission chains and the digest are computed, not written by hand.",
  "tenant": {
    "name": "Harbourline Logistics",
    "site": "harbourline.atlassian.net"
  },
  "period": {
    "label": "Q3 2026 user access review"
  },
  "reviewers": [
    {
      "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
      "displayName": "Priya Raman",
      "role": "Head of Security",
      "scope": "All Jira projects and Confluence spaces"
    }
  ],
  "round": {
    "id": "round-2026-q3",
    "framework": "SOC2",
    "snapshotAt": "2026-08-14T09:00:00.000Z",
    "openedAt": "2026-08-14T09:12:00.000Z",
    "items": [
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|confluence-page|p-board-q3|read",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "confluence-page",
        "resourceKey": "p-board-q3",
        "permission": "read",
        "via": [
          "global:ADMINISTER",
          "page:p-board-root:view",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|confluence-page|p-board-q3|update",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "confluence-page",
        "resourceKey": "p-board-q3",
        "permission": "update",
        "via": [
          "global:ADMINISTER",
          "page:p-board-root:view",
          "group:platform-admins",
          "space:BOARD:update",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|confluence-page|p-board-root|read",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "confluence-page",
        "resourceKey": "p-board-root",
        "permission": "read",
        "via": [
          "global:ADMINISTER",
          "page:p-board-root:view",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|confluence-page|p-board-root|update",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "confluence-page",
        "resourceKey": "p-board-root",
        "permission": "update",
        "via": [
          "global:ADMINISTER",
          "page:p-board-root:view",
          "group:platform-admins",
          "page:p-board-root:edit",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|confluence-space|BOARD|administer",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "confluence-space",
        "resourceKey": "BOARD",
        "permission": "administer",
        "via": [
          "global:ADMINISTER"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|confluence-space|BOARD|read",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "confluence-space",
        "resourceKey": "BOARD",
        "permission": "read",
        "via": [
          "global:ADMINISTER",
          "space:BOARD:read",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|confluence-space|BOARD|update",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "confluence-space",
        "resourceKey": "BOARD",
        "permission": "update",
        "via": [
          "global:ADMINISTER",
          "space:BOARD:update",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|confluence-space|ENG|administer",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "confluence-space",
        "resourceKey": "ENG",
        "permission": "administer",
        "via": [
          "global:ADMINISTER",
          "space:ENG:administer",
          "user:557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|confluence-space|ENG|read",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "confluence-space",
        "resourceKey": "ENG",
        "permission": "read",
        "via": [
          "global:ADMINISTER"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|confluence-space|ENG|update",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "confluence-space",
        "resourceKey": "ENG",
        "permission": "update",
        "via": [
          "global:ADMINISTER"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|jira-project|ENG|ADMINISTER_PROJECTS",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "ADMINISTER_PROJECTS",
        "via": [
          "global:ADMINISTER"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|jira-project|ENG|BROWSE_PROJECTS",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "BROWSE_PROJECTS",
        "via": [
          "global:ADMINISTER"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|jira-project|ENG|EDIT_ISSUES",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "EDIT_ISSUES",
        "via": [
          "global:ADMINISTER"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|jira-project|SUP|ADMINISTER_PROJECTS",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "jira-project",
        "resourceKey": "SUP",
        "permission": "ADMINISTER_PROJECTS",
        "via": [
          "global:ADMINISTER"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|jira-project|SUP|BROWSE_PROJECTS",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "jira-project",
        "resourceKey": "SUP",
        "permission": "BROWSE_PROJECTS",
        "via": [
          "global:ADMINISTER"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001|jira-project|SUP|EDIT_ISSUES",
        "accountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "displayName": "Priya Raman",
        "resourceType": "jira-project",
        "resourceKey": "SUP",
        "permission": "EDIT_ISSUES",
        "via": [
          "global:ADMINISTER"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|confluence-page|p-board-q3|read",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "confluence-page",
        "resourceKey": "p-board-q3",
        "permission": "read",
        "via": [
          "page:p-board-root:view",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|confluence-page|p-board-q3|update",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "confluence-page",
        "resourceKey": "p-board-q3",
        "permission": "update",
        "via": [
          "page:p-board-root:view",
          "group:platform-admins",
          "space:BOARD:update",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|confluence-page|p-board-root|read",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "confluence-page",
        "resourceKey": "p-board-root",
        "permission": "read",
        "via": [
          "page:p-board-root:view",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|confluence-page|p-board-root|update",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "confluence-page",
        "resourceKey": "p-board-root",
        "permission": "update",
        "via": [
          "page:p-board-root:view",
          "group:platform-admins",
          "page:p-board-root:edit",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|confluence-space|BOARD|read",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "confluence-space",
        "resourceKey": "BOARD",
        "permission": "read",
        "via": [
          "space:BOARD:read",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|confluence-space|BOARD|update",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "confluence-space",
        "resourceKey": "BOARD",
        "permission": "update",
        "via": [
          "space:BOARD:update",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|confluence-space|ENG|read",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "confluence-space",
        "resourceKey": "ENG",
        "permission": "read",
        "via": [
          "space:ENG:read",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|confluence-space|ENG|update",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "confluence-space",
        "resourceKey": "ENG",
        "permission": "update",
        "via": [
          "space:ENG:update",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|jira-project|ENG|ADMINISTER_PROJECTS",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "ADMINISTER_PROJECTS",
        "via": [
          "scheme:Engineering Default",
          "group:platform-admins"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|jira-project|ENG|BROWSE_PROJECTS",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "BROWSE_PROJECTS",
        "via": [
          "scheme:Engineering Default",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|jira-project|ENG|EDIT_ISSUES",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "EDIT_ISSUES",
        "via": [
          "scheme:Engineering Default",
          "role:Developers",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002|jira-project|SUP|BROWSE_PROJECTS",
        "accountId": "557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002",
        "displayName": "Tomas Lindqvist",
        "resourceType": "jira-project",
        "resourceKey": "SUP",
        "permission": "BROWSE_PROJECTS",
        "via": [
          "scheme:Support Default",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003|confluence-space|ENG|read",
        "accountId": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003",
        "displayName": "Ana Duarte",
        "resourceType": "confluence-space",
        "resourceKey": "ENG",
        "permission": "read",
        "via": [
          "space:ENG:read",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003|confluence-space|ENG|update",
        "accountId": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003",
        "displayName": "Ana Duarte",
        "resourceType": "confluence-space",
        "resourceKey": "ENG",
        "permission": "update",
        "via": [
          "space:ENG:update",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003|jira-project|ENG|BROWSE_PROJECTS",
        "accountId": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003",
        "displayName": "Ana Duarte",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "BROWSE_PROJECTS",
        "via": [
          "scheme:Engineering Default",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003|jira-project|ENG|EDIT_ISSUES",
        "accountId": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003",
        "displayName": "Ana Duarte",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "EDIT_ISSUES",
        "via": [
          "scheme:Engineering Default",
          "role:Developers",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003|jira-project|SUP|ADMINISTER_PROJECTS",
        "accountId": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003",
        "displayName": "Ana Duarte",
        "resourceType": "jira-project",
        "resourceKey": "SUP",
        "permission": "ADMINISTER_PROJECTS",
        "via": [
          "scheme:Support Default",
          "projectLead"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003|jira-project|SUP|BROWSE_PROJECTS",
        "accountId": "557058:a1c4e2f0-3333-4a01-9c31-0b6d21f4a003",
        "displayName": "Ana Duarte",
        "resourceType": "jira-project",
        "resourceKey": "SUP",
        "permission": "BROWSE_PROJECTS",
        "via": [
          "scheme:Support Default",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-4444-4a01-9c31-0b6d21f4a004|confluence-space|ENG|read",
        "accountId": "557058:a1c4e2f0-4444-4a01-9c31-0b6d21f4a004",
        "displayName": "Marcus Bell",
        "resourceType": "confluence-space",
        "resourceKey": "ENG",
        "permission": "read",
        "via": [
          "space:ENG:read",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-4444-4a01-9c31-0b6d21f4a004|confluence-space|ENG|update",
        "accountId": "557058:a1c4e2f0-4444-4a01-9c31-0b6d21f4a004",
        "displayName": "Marcus Bell",
        "resourceType": "confluence-space",
        "resourceKey": "ENG",
        "permission": "update",
        "via": [
          "space:ENG:update",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-4444-4a01-9c31-0b6d21f4a004|jira-project|ENG|BROWSE_PROJECTS",
        "accountId": "557058:a1c4e2f0-4444-4a01-9c31-0b6d21f4a004",
        "displayName": "Marcus Bell",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "BROWSE_PROJECTS",
        "via": [
          "scheme:Engineering Default",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-4444-4a01-9c31-0b6d21f4a004|jira-project|ENG|EDIT_ISSUES",
        "accountId": "557058:a1c4e2f0-4444-4a01-9c31-0b6d21f4a004",
        "displayName": "Marcus Bell",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "EDIT_ISSUES",
        "via": [
          "scheme:Engineering Default",
          "role:Developers",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-4444-4a01-9c31-0b6d21f4a004|jira-project|SUP|BROWSE_PROJECTS",
        "accountId": "557058:a1c4e2f0-4444-4a01-9c31-0b6d21f4a004",
        "displayName": "Marcus Bell",
        "resourceType": "jira-project",
        "resourceKey": "SUP",
        "permission": "BROWSE_PROJECTS",
        "via": [
          "scheme:Support Default",
          "group:engineering"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "approved",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-5555-4a01-9c31-0b6d21f4a005|jira-project|ENG|BROWSE_PROJECTS",
        "accountId": "557058:a1c4e2f0-5555-4a01-9c31-0b6d21f4a005",
        "displayName": "Jo Whitfield",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "BROWSE_PROJECTS",
        "via": [
          "scheme:Engineering Default",
          "group:contractors-2024"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "revoked",
        "decidedAt": "2026-08-18T14:31:00.000Z"
      },
      {
        "itemKey": "557058:a1c4e2f0-6666-4a01-9c31-0b6d21f4a006|jira-project|ENG|EDIT_ISSUES",
        "accountId": "557058:a1c4e2f0-6666-4a01-9c31-0b6d21f4a006",
        "displayName": "Release Bot",
        "resourceType": "jira-project",
        "resourceKey": "ENG",
        "permission": "EDIT_ISSUES",
        "via": [
          "scheme:Engineering Default",
          "group:release-automation"
        ],
        "reviewerAccountId": "557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001",
        "decision": "exception",
        "decidedAt": "2026-08-18T14:31:00.000Z",
        "reason": "Service account for the release pipeline. Credentials rotate every 90 days and it cannot log in interactively. Reviewed with the platform lead."
      }
    ],
    "closedAt": "2026-08-18T14:44:00.000Z",
    "digest": "75acfb927802ddab289299a231908940d4fe53d64b3a523bc5a7a65ee151c4a2"
  },
  "findings": [
    {
      "code": "DEACTIVATED_USER_WITH_ACCESS",
      "severity": "critical",
      "subjectKey": "557058:a1c4e2f0-5555-4a01-9c31-0b6d21f4a005::ENG",
      "title": "Deactivated account still has access to ENG",
      "detail": "Jo Whitfield is deactivated in Atlassian but still resolves to 1 permission(s) on project ENG.",
      "evidence": [
        "Jo Whitfield (557058:a1c4e2f0-5555-4a01-9c31-0b6d21f4a005)",
        "project ENG",
        "BROWSE_PROJECTS"
      ]
    },
    {
      "code": "VIEW_RESTRICTED_BUT_EDITABLE",
      "severity": "high",
      "subjectKey": "p-board-q3",
      "title": "Page \"Q3 Board Pack\" looks restricted, but everyone who can view it can also edit it",
      "detail": "Page \"Q3 Board Pack\" (p-board-q3) in space BOARD \"Board\" carries a view restriction, so it displays as locked. All 1 user who can view it can also edit it — no edit restriction is set on the page, so editing falls back to the space update grant. (Site and space administrators are excluded from that count; they can view and edit regardless.) View restrictions cascade to child pages in Confluence; edit restrictions do not, so an edit restriction on an ancestor does not protect this page.",
      "evidence": [
        "View restriction on ancestor page \"Board Space Home\" (p-board-root): group \"platform-admins\" (2 members).",
        "Effective viewers, excluding administrators: Tomas Lindqvist (557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002).",
        "NO edit restriction is set on this page, so editing falls back to the space BOARD \"update\" permission (group \"platform-admins\" (2 members)). View gates edit, so that grant narrows to the view audience — and it does not narrow it further, which leaves every viewer able to edit.",
        "Effective editors, excluding administrators: Tomas Lindqvist (557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002).",
        "Site administrators view and edit every space regardless of page restrictions (via global:ADMINISTER): Priya Raman (557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001)."
      ]
    },
    {
      "code": "VIEW_RESTRICTED_BUT_EDITABLE",
      "severity": "low",
      "subjectKey": "p-board-root",
      "title": "Page \"Board Space Home\" is editable by everyone who can view it, which appears deliberate",
      "detail": "Page \"Board Space Home\" (p-board-root) in space BOARD \"Board\" carries a view restriction and its own edit restriction, and the two cover the same people. All 1 user who can view it can also edit it. (Site and space administrators are excluded from that count; they can view and edit regardless.) An edit restriction was set on this page explicitly, so this reads as a deliberate choice rather than the cascade gap, and is recorded at low severity for completeness.",
      "evidence": [
        "View restriction on this page \"Board Space Home\" (p-board-root): group \"platform-admins\" (2 members).",
        "Effective viewers, excluding administrators: Tomas Lindqvist (557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002).",
        "An edit restriction IS set on this page (group \"platform-admins\" (2 members)), and it names the same people as the view audience, so it does not narrow anything. Because the restriction was set explicitly, this looks like a deliberate configuration rather than the inheritance gap, and is recorded at low severity.",
        "Effective editors, excluding administrators: Tomas Lindqvist (557058:a1c4e2f0-2222-4a01-9c31-0b6d21f4a002).",
        "Site administrators view and edit every space regardless of page restrictions (via global:ADMINISTER): Priya Raman (557058:a1c4e2f0-1111-4a01-9c31-0b6d21f4a001)."
      ]
    }
  ]
}