Overview
Policies
Section titled “Policies”Policies and their immutable versions, activation as enforce or shadow (each sealed as an admin deed), and the lint, dry-run and test tools (docs/POLICY_LANGUAGE.md). Every route accepts a Console session (by role) or an org admin key (admin scope). Agent keys get 403 insufficient_scope on all of them, reads included.