[
  {
    "name": "user-engine",
    "sources": [
      "user-engine"
    ],
    "tenants": [
      "*"
    ],
    "may_write": true,
    "may_read": false
  },
  {
    "name": "approval-engine",
    "sources": [
      "approval-engine"
    ],
    "tenants": [
      "*"
    ],
    "may_write": true,
    "may_read": false,
    "evidence_kind": "load-bearing"
  }
]