{"policyVersion":"v1","service":"cloakharbor-demo","allowed":["Read public docs and discovery files","Inspect synthetic demo data","Call public MCP introspection tools","Draft dry-run analysis against synthetic or authorized/redacted data"],"requiresPlatformKey":["/api/v1/demo/reset","/api/v1/demo/load-fixture","/api/v1/principals","/api/v1/clients","/api/v1/findings","/api/v1/evidence","/api/v1/risk/calculate","/api/v1/kanban/tasks","/api/v1/calendar/events","/api/v1/actions/draft","/api/v1/actions/{id}/approve","/api/v1/actions/{id}/reject","/api/v1/actions/{id}/send","/api/v1/reports/generate","/api/v1/reports/{id}/review","/api/v1/reports/{id}/publish-docs","/api/v1/reports/{id}/export-sheets","/api/v1/reports/{id}/upload-files","/api/v1/reports/{id}/run-browserops","/api/v1/reports/{id}/run-sandbox","/api/v1/integrations/{service}/{action}","/api/v1/capabilities","/api/v1/setup","/api/v1/workloads/self-case","/api/v1/kanban/tasks/{id}/move","/api/v1/loop","/api/v1/webhooks/test","/api/v1/operator/self-case","/api/v1/operator/clients","/api/v1/operator/osint","/api/v1/operator/schedules/osint","/api/v1/operator/schedules/osint/progress","/api/v1/operator/infrastructure/aws","/api/v1/operator/evidence","/api/v1/operator/setup","/api/v1/operator/loop","/api/v1/operator/action-packets/draft","/api/v1/operator/actions/{id}/approve","/api/v1/operator/actions/{id}/reject","/api/v1/operator/actions/{id}/send","/api/v1/operator/kanban/tasks/{id}/move","/api/v1/operator/reports/{id}/{action}"],"disallowed":["Live scraping real people without authorization","Automated external takedown submission without human approval","Unbounded people-search crawling","Impersonation, evasion, harassment, credential theft, or doxxing","Raw private evidence export through public routes"],"traceRequired":true,"aiOutputPolicy":"draft_only_human_review_required"}