WIP: Claude Code rate-limit checkpoint (20dd5562)

examples/tenant-engine/protected_system_manifest.yaml

@@ -33,6 +33,17 @@ resource_types:
         A tenant's resolved ceiling (spend, seats, and similar limits) plus
         the provenance of that value. Not an entitlement and not a meter.
 actions:
+  - name: tenant.read
+    capabilities:
+      - View
+      - Audit
+    planes:
+      - Identity
+      - Audit
+    exposure_modes:
+      - Metadata
+    metadata:
+      required_context: []
   - name: tenant.create
     capabilities:
       - Create
@@ -68,6 +79,30 @@ actions:
       - Metadata
     metadata:
       required_context: []
+  - name: tenant.role.read
+    capabilities:
+      - View
+      - Audit
+    planes:
+      - Identity
+      - Policy
+      - Audit
+    exposure_modes:
+      - Metadata
+    metadata:
+      required_context: []
+  - name: tenant.role.read.live
+    capabilities:
+      - View
+      - Audit
+    planes:
+      - Identity
+      - Policy
+      - Audit
+    exposure_modes:
+      - Metadata
+    metadata:
+      required_context: []
   - name: tenant.plan.assign
     capabilities:
       - Bind