{
  "proposal_id": "CUST-WP-0073-interactive-launch",
  "revision": 2,
  "status": "source_proposal_not_applied",
  "target": {
    "workstation": "bnt-lap001",
    "substrate": "WSL2",
    "distribution": "custodian-codex",
    "account": "custodian-codex",
    "uid": null,
    "home": "/home/custodian-codex",
    "project": "/home/custodian-codex/work/the-custodian",
    "ssh_alias": "custodian-codex-workstation",
    "ssh_endpoint": null,
    "rootfs_sha256": null,
    "codex_sha256": null,
    "host_identity": null
  },
  "account_policy": {
    "password_login": false,
    "sudo": false,
    "supplementary_admin_groups": [],
    "home_mode": "0700",
    "codex_state_mode": "0700",
    "operator_auth_copy": false
  },
  "required_effective_denials": [
    "Windows executable interop",
    "Windows drive mounts",
    "shared WSL and container-control sockets",
    "operator homes and SSH agent",
    "admin kubeconfig and OpenBao credentials",
    "network-accessible host and container control planes"
  ],
  "ssh_policy": {
    "exposure": "operator-loopback-only",
    "root_login": false,
    "password_login": false,
    "agent_forwarding": false,
    "tcp_forwarding": false,
    "x11_forwarding": false,
    "native_stdio_session": true
  },
  "attachment": "native-desktop-existing-chat-handoff",
  "approval": "native-app-server-client-approval-ui-retained",
  "spend_authorized": false,
  "live_changes_authorized_by_this_file": false,
  "actual_assignment_admitted": false
}