{
  "apiVersion": "hub.example.com/v1alpha1",
  "kind": "Policy",
  "metadata": {
    "name": "036 Gitea Reviewed Lifecycle V1",
    "slug": "036-gitea-reviewed-lifecycle-v1"
  },
  "spec": {
    "priority": 36,
    "description": "Allow SHA-fenced PR synchronization, verified exact-head merge and merged-branch cleanup only for the bound gitea-all production client; connector preconditions remain mandatory.",
    "match": {
      "project": "gitea-all",
      "environmentClassifications": ["production"],
      "connectors": ["gitea"],
      "riskClasses": ["R3"],
      "toolPatterns": [
        "gitea.pullrequest.sync",
        "gitea.pullrequest.merge",
        "gitea.branch.delete"
      ]
    },
    "conditions": {
      "requireEnabledClient": true,
      "requireBinding": true,
      "maxArgumentBytes": 65536
    },
    "decision": "allow_if_conditions",
    "terminal": true
  }
}