[
  {
    "name": "user-engine",
    "tokens": ["replace-with-write-token"],
    "sources": ["user-engine"],
    "tenants": ["*"],
    "may_write": true,
    "may_read": false,
    "secret_policy": "redact"
  },
  {
    "name": "operator",
    "tokens": ["replace-with-read-token"],
    "sources": ["user-engine"],
    "tenants": ["*"],
    "may_write": true,
    "may_read": true,
    "secret_policy": "redact"
  },
  {
    "name": "temporary-evidence-sender",
    "tokens": ["replace-with-short-lived-token"],
    "sources": ["whitehat-security"],
    "tenants": ["tenant:trial:named-fixture"],
    "may_write": true,
    "may_read": true,
    "secret_policy": "redact",
    "expires_at": "2026-08-22T18:15:00Z"
  }
]