{
  "receipts": {
    "action_bound": true,
    "postcondition_required_for": [
      "github.merge_pr"
    ],
    "single_use_for_high_risk": true
  },
  "reconciliation": [
    {
      "events": [
        "push",
        "pull_request.closed"
      ],
      "id": "recon:github-merge",
      "match_receipt": {
        "event": "github_action_executed",
        "fields": [
          "repo",
          "branch",
          "commit_sha",
          "actor"
        ]
      },
      "on_missing_receipt": "violation",
      "on_non_gate_actor": "violation",
      "source": "github.webhook"
    }
  ],
  "version": "0.1.0"
}