rage.fail

execute-on-rollup

Any specific execution capability on a compute resource implies the generalized CanExecuteOn.

derived any cloud emits CanExecuteOn

match

A conjunctive graph pattern. Variables (?x) bind node ids; every clause must hold.

{'principal': None} {'exec': None} {'compute': None}

where

?exec in [CanExecuteCommand, CanInvoke, CanDeploy, CanModifyCode, CanModifyConfiguration, CanStart, CanTrigger, CanSchedule, CanExecuteAs] node_class(?compute) == Compute

emit

source type	`Identity`
target type	`Compute`
source	`?principal`
target	`?compute`

Narrative

{principal.name} can get code running on {compute.name} (via {edge:?exec}).

Raw rule rules/derived/capability-completions.yaml

id: execute-on-rollup
emits: CanExecuteOn
description: Any specific execution capability on a compute resource implies the generalized CanExecuteOn.
applies_to:
- '*'
match:
- - principal: null
  - exec: null
  - compute: null
where:
- ?exec in [CanExecuteCommand, CanInvoke, CanDeploy, CanModifyCode, CanModifyConfiguration, CanStart,
  CanTrigger, CanSchedule, CanExecuteAs]
- node_class(?compute) == Compute
emit:
  source_type: Identity
  target_type: Compute
  source: ?principal
  target: ?compute
  derived_from:
  - ?principal ?exec ?compute
  narrative: '{principal.name} can get code running on {compute.name} (via {edge:?exec}).'