# Read-only policy for Target Revenue Trust Service runtime secrets (WP-0011). path "platform/data/workloads/target-revenue/runtime-secrets" { capabilities = ["read"] } path "platform/metadata/workloads/target-revenue/runtime-secrets" { capabilities = ["read"] }