def agentPolicy : Policy := [ allow "summarizer" to "read" on "/code", allow "summarizer" to "read" on "/logs", forbid "summarizer" to "write" on "/code", allow "deployer" to "deploy" on "/prod", forbid "deployer" to "delete" on "/prod", abstain "auditor" on "/logs", ]