{
  "$schema": "https://graice.tech/schema/agent-permissions.json",
  "project": "compliance-intelligence-hub",
  "version": "1.0",
  "agents": {
    "allow": ["read", "search", "classify", "query"],
    "require_approval": ["admin", "key_mint"],
    "deny": ["write_sources"]
  },
  "scoping": "API keys are scoped per source channel (e.g. CMS, Federal Register). Requests outside a key's scope return 403.",
  "rate_limits": { "requests_per_minute": 60 },
  "provenance": "Every update carries a citation with a SHA-256 content hash; high-impact updates may carry an Ed25519-signed receipt.",
  "contact": "mjuhanson13@gmail.com"
}