path "platform/data/workloads/approval-engine/audit-sender" { capabilities = ["read"] }