backend-authorization

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The document configures an OPA sidecar to pull signed policy bundles at runtime from https://policies.internal.example.com, which are executable policy artifacts that directly control authorization behavior (remote code/policies fetched and executed by the policy engine).