[
  {
    "name": "user-engine",
    "tokens": [
      "replace-with-write-token"
    ],
    "sources": [
      "user-engine"
    ],
    "tenants": [
      "*"
    ],
    "may_write": true,
    "may_read": false,
    "secret_policy": "redact",
    "evidence_kind": "attributive",
    "completeness_trade": "illustrative: emission is after commit, so a crash between the two loses the event"
  },
  {
    "name": "operator",
    "tokens": [
      "replace-with-read-token"
    ],
    "sources": [
      "user-engine"
    ],
    "tenants": [
      "*"
    ],
    "may_write": true,
    "may_read": true,
    "secret_policy": "redact"
  },
  {
    "name": "temporary-evidence-sender",
    "tokens": [
      "replace-with-short-lived-token"
    ],
    "sources": [
      "whitehat-security"
    ],
    "tenants": [
      "tenant:trial:named-fixture"
    ],
    "may_write": true,
    "may_read": true,
    "secret_policy": "redact",
    "expires_at": "2026-08-22T18:15:00Z",
    "evidence_kind": "attributive"
  },
  {
    "name": "approval-engine",
    "tokens": [
      "replace-with-write-token"
    ],
    "sources": [
      "approval-engine"
    ],
    "tenants": [
      "*"
    ],
    "may_write": true,
    "may_read": false,
    "secret_policy": "redact",
    "evidence_kind": "load-bearing"
  }
]