# Example platform tenant envelope (canon B10). Platform-owned; read-only to the tenant.
apiVersion: emergent-security/v0.8
kind: PlatformTenantEnvelope
id: envelope://platform/tenant/acme
tenant: tenant://acme
owner: L3
version: 7
capabilities:                 # every class the tenant can reach at all
  - code.edit
  - test.add
  - git.commit_feature
  - git.push_feature
  - dependency.add
  - deploy.tenant_runtime
  - data.tenant_own
delegated:                    # subset of capabilities decided autonomously by platform delegation
  code.edit:            { mode: autonomous }
  test.add:             { mode: autonomous }
  git.commit_feature:   { mode: autonomous }
  git.push_feature:     { mode: autonomous }
  dependency.add:       { mode: autonomous_with_obligations, evidence_required: [lockfile_updated], obligations: [record] }
  deploy.tenant_runtime:
    mode: autonomous_with_obligations
    evidence_required: [tests, provenance]
    obligations: [record, verify_provenance]
ceilings:
  blast_radius: tenant
  tenant_reach: own
  data_sensitivity: personal
  irreversible: false
  external_exposure: published_endpoints_only
prohibitions:                 # classes the tenant may never perform, in any mode
  - deploy.public
  - iam.platform_change
escalation_target: platform