Does AAP/AO support authorization by a signed decision from an independent external authority?

Project Discussions
1

AAP 2.7 can offload execution policy decisions to an external OPA server. Does AAP or Automation Orchestrator support a job being authorized by a signed decision issued by an independent external authority, without first translating that authority into customer-authored OPA policy or Red Hat-managed RBAC?

If yes, what supported interface or artifact format carries that authority into the execution decision?

If no, would custom OPA verification logic be the required integration point?

2

One follow-up bump. The question stands: does AAP or Automation Orchestrator have a supported interface for a job to be authorized by a signed decision from an independent external authority, without first translating that authority into customer-authored OPA policy or Red Hat-managed RBAC?