JalSakshi: proving whether village tap water really came, with a missed call and AWS Step Functions

place_call = tasks.LambdaInvoke(
    self, "PlaceCall",
    lambda_function=place_call_fn,
    integration_pattern=sfn.IntegrationPattern.WAIT_FOR_TASK_TOKEN,
    payload=sfn.TaskInput.from_object({
        "task_token": sfn.JsonPath.task_token,
        "input": sfn.JsonPath.entire_payload,
    }),
    task_timeout=sfn.Timeout.duration(Duration.minutes(10)),
)

sfn.send_task_success(taskToken=token, output=json.dumps({"answered": True}))

// A family that declined or withdrew is never called again, unless it gives a missed call itself.
@id("no-calls-after-withdrawal")
forbid (principal, action == Action::"PlaceCall", resource)
when {
  ["DECLINED", "WITHDRAWN"].contains(resource.consent_status) && !context.caller_initiated
};

// Calls back after missed calls: at most 5 a day per number, so nobody can be made to spam.
@id("callback-limit")
forbid (principal, action == Action::"PlaceCall", resource)
when { context.caller_initiated && context.callbacks_today >= 5 };