package example.authz
default allow = false
allow {
  input.user == "ci-bot"
  input.action == "read"
}