Break Glass Policy Linter

This tool analyzes a break-glass access policy expressed as JSON and reports whether required invariants are satisfied, such as reconstruction atomicity windows under 600 seconds, presence of passive expiry via TTL, and sidecar consistency between related fields. It accepts a single input parameter schema_json, which must be the full parsed JSON object representing the schema or policy to be linted, not a raw JSON string. The tool interprets only the data contained in this object and does not consult any external systems or context. The output must strictly validate against the system-provided structured output schema, which is auto-produced and not supplied here.