{
  "trusted_state_origins": [
    "https://app.local.test"
  ],
  "csrf_required_for_ambient_state_change": true,
  "expected_csrf_signal": "SEC006-SYNTHETIC-TOKEN",
  "cors": {
    "https://app.local.test/api/status": {
      "allowed_origins": [
        "https://reports.partner.test"
      ],
      "allow_credentials": false,
      "allowed_methods": [
        "GET"
      ]
    }
  },
  "csp": {
    "page_origin": "https://app.local.test",
    "directives": {
      "default-src": [
        "'self'"
      ],
      "script-src": [
        "'self'"
      ],
      "img-src": [
        "'self'"
      ],
      "connect-src": [
        "'self'"
      ]
    }
  },
  "cors_is_authorization": false,
  "csp_is_primary_xss_defense": false,
  "origin_site_interchangeable": false
}
