{
  "python": "3.10+ stdlib",
  "network": "FORBIDDEN_NOT_REQUIRED",
  "external_packages": [],
  "required_decisions": [
    "ACCEPT_EVIDENCE_SET",
    "DENY_SBOM_ARTIFACT_MISMATCH",
    "DENY_PROVENANCE_SUBJECT_MISMATCH",
    "DENY_UNAPPROVED_BUILDER"
  ],
  "evidence_artifact": "SBOM & Build Provenance Verification Record v1"
}