{
  "schema": "SEC010_LOCAL_SECRET_SCOPE_POLICY_v1",
  "local_only": true,
  "production_proof": false,
  "wildcard_secret_access_forbidden": true,
  "secret_values_in_evidence_forbidden": true,
  "audit_plaintext_forbidden": true,
  "human_direct_read_default": false,
  "rotation_requires": {
    "new_active": true,
    "old_revoked": true,
    "consumers_updated": true,
    "audit_event_present": true
  },
  "secret_objects": {
    "secret://orders-read-v1": {
      "owner": "orders-api",
      "active": true
    },
    "secret://batch-export-v1": {
      "owner": "batch-worker",
      "active": true
    },
    "secret://report-sign-v1": {
      "owner": "report-service",
      "active": true
    },
    "secret://orders-read-v2": {
      "owner": "orders-api",
      "active": true
    }
  },
  "identity_access": {
    "wid-orders-api": {
      "secret://orders-read-v1": [
        "retrieve",
        "use"
      ],
      "secret://orders-read-v2": [
        "retrieve",
        "use"
      ]
    },
    "wid-batch-worker": {
      "secret://batch-export-v1": [
        "retrieve",
        "use"
      ]
    },
    "wid-report-service": {
      "secret://report-sign-v1": [
        "retrieve",
        "use"
      ]
    }
  },
  "revoked_secret_ids": [
    "secret://orders-read-v0"
  ]
}