API transport: Prefer jf api (JFrog CLI 2.100.0+). See jf-api-patterns.md (path-only URLs; auth from jf config). Examples using curl with $JFROG_URL + bearer token are fallback when the CLI is missing or below 2.100.0.

Evidence Promotion Policy Creator

Create a JFrog lifecycle policy that validates evidence exists before allowing application promotion, scoped to applications with specific labels.

Prerequisites

Follow jfrog-apptrust-auth.md to authenticate with the JFrog Platform before proceeding.

Desired State

After the workflow completes, the following must be true:

• A template exists (Rego policy) that evaluates evidence for the requested predicate type.
• A rule exists that binds the template to the predicate type (and any extra parameters).
• A policy exists, scoped to the chosen project or application, that blocks or warns on promotion when the evidence check fails.