{
  "version": "fak-policy/v1",
  "posture": "admit_and_log",
  "allow": [
    "cite_source",
    "create_note",
    "fetch_url",
    "summarize_document"
  ],
  "deny": {
    "delete_file": "POLICY_BLOCK",
    "exfiltrate": "POLICY_BLOCK",
    "send_email": "POLICY_BLOCK",
    "transfer_funds": "POLICY_BLOCK",
    "upload_file": "POLICY_BLOCK"
  },
  "self_modify_globs": [
    ".git/",
    ".dos/",
    "policy.json",
    "/etc/",
    "id_rsa"
  ],
  "redact_fields": [
    "password",
    "secret",
    "api_key",
    "token",
    "authorization"
  ]
}
