{
  "approval_lanes": [
    {
      "approver_role": "manager",
      "id": "package-install",
      "sla": "15 minutes",
      "title": "Package installs"
    },
    {
      "approver_role": "security-admin",
      "id": "external-network",
      "sla": "30 minutes",
      "title": "External data/API access"
    },
    {
      "approver_role": "security-admin",
      "id": "production-change",
      "sla": "named approval",
      "title": "Production change or deploy"
    },
    {
      "approver_role": "manager",
      "id": "regulated-record",
      "sla": "named approval",
      "title": "Healthcare, finance, legal, or identity record update"
    }
  ],
  "audit_exports": [
    "decision log",
    "approval queue",
    "session recording index",
    "policy diff",
    "red-team report",
    "framework coverage"
  ],
  "fleet_controls": {
    "connector_kill": true,
    "disabled_connectors": [],
    "listing_disable": true,
    "offline_trial_days": 90,
    "policy_version_pin": true,
    "single_agent_kill": true
  },
  "generated_at": "2026-10-05T22:21:30Z",
  "hosted_mode": {
    "billing_and_sso": "credential-gated",
    "license_server": "ready",
    "local_enforcement": "ready",
    "team_dashboard": "ready"
  },
  "roles": [
    {
      "can": [
        "approve",
        "deny",
        "assign policy",
        "export evidence",
        "disable connector"
      ],
      "id": "manager",
      "name": "Manager"
    },
    {
      "can": [
        "manage policies",
        "run red-team",
        "publish internal templates",
        "revoke agents"
      ],
      "id": "security-admin",
      "name": "Security Admin"
    },
    {
      "can": [
        "run assigned agents",
        "request approvals",
        "view own evidence"
      ],
      "id": "developer",
      "name": "Developer"
    },
    {
      "can": [
        "submit templates",
        "price listings",
        "respond to reviews"
      ],
      "id": "creator",
      "name": "Creator"
    },
    {
      "can": [
        "view evidence",
        "export reports",
        "verify tamper chain"
      ],
      "id": "auditor",
      "name": "Auditor"
    }
  ],
  "schema": "safecadence.agentguard.team-control.v1"
}