{
  "version": 1,
  "mvp_modes": ["READ_ONLY", "OPERATOR", "CODEGEN", "BLOCK", "NOT_SUPPORTED"],
  "read_only": {
    "risk": "low",
    "gates": ["H4_INPUT", "H4_OUTPUT", "H5_CHAT_AUDIT", "H6_TOKEN"],
    "needs_approval": false
  },
  "not_supported": {
    "risk": "medium",
    "gates": ["H4_INPUT", "ACTION_GATE"],
    "needs_approval": true
  },
  "operator": {
    "risk": "medium",
    "gates": ["H4_INPUT", "ACTION_GATE", "H4_OUTPUT", "H5_CHAT_AUDIT", "H6_TOKEN"],
    "needs_approval": false
  },
  "codegen": {
    "risk": "high",
    "gates": ["H4_INPUT", "H4_ARTIFACT_SCAN", "LOOP_GATE", "H5_CHAT_AUDIT"],
    "needs_approval": true
  },
  "block": {
    "risk": "high",
    "gates": ["H4_INPUT", "H5_CHAT_AUDIT"],
    "needs_approval": false
  },
  "read_only_terms": [
    "what", "why", "how", "explain", "summarize", "summary", "status", "show",
    "list", "where", "when", "plan", "evidence", "source", "docs", "report",
    "audit", "governance", "security", "finops", "traceability", "casan"
  ],
  "block_patterns": [
    "ignore previous instructions",
    "bypass guard",
    "reveal system prompt",
    "show hidden instruction",
    "rm -rf",
    "drop table",
    "export secrets",
    "dump database",
    "private key",
    "api key"
  ],
  "not_supported_patterns": [
    "deploy",
    "run command",
    "execute",
    "write a file",
    "write file",
    "edit a file",
    "edit file",
    "modify code",
    "create a file",
    "create file",
    "delete a file",
    "delete file",
    "chmod",
    "curl http",
    "/etc/passwd"
  ],
  "operator_terms": [
    "run tests",
    "run chat tests",
    "build pack",
    "build evidence pack",
    "verify pack",
    "verify evidence pack"
  ],
  "codegen_terms": [
    "generate code",
    "draft code",
    "write code",
    "sourcegen",
    "codegen"
  ]
}