{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "urn:awoooi:security-rollout-policy-v1",
  "title": "AWOOOI 低摩擦資安 Rollout Policy (v1)",
  "description": "定義 Security Supply Chain 初期如何以 observe / warn / approve_required / block_candidate 分階段收斂，避免一開始把資安限制拉太高。",
  "type": "object",
  "required": [
    "schema_version",
    "status",
    "default_mode",
    "enforcement_level",
    "policy_items"
  ],
  "properties": {
    "schema_version": {
      "const": "security_rollout_policy_v1"
    },
    "status": {
      "type": "string",
      "enum": ["draft"]
    },
    "default_mode": {
      "type": "string",
      "enum": ["observe"]
    },
    "enforcement_level": {
      "type": "string",
      "enum": ["mirror_only", "read_only_policy", "approval_gate", "enforced"]
    },
    "policy_items": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "condition",
          "mode",
          "allowed",
          "forbidden",
          "reason"
        ],
        "properties": {
          "condition": {
            "type": "string"
          },
          "mode": {
            "type": "string",
            "enum": ["observe", "warn", "approve_required", "block_candidate"]
          },
          "allowed": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "forbidden": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "reason": {
            "type": "string"
          }
        },
        "additionalProperties": false
      }
    }
  },
  "additionalProperties": false
}