def agentPolicy : Policy := [
allow "summarizer" to "read" on "/code",
allow "summarizer" to "read" on "/logs",
forbid "summarizer" to "write" on "/code",
allow "deployer" to "deploy" on "/prod",
forbid "deployer" to "delete" on "/prod",
abstain "auditor" on "/logs",
]