{
  "apiVersion": "hub.example.com/v1alpha1",
  "kind": "CapabilityPack",
  "metadata": {
    "name": "Fleet Ops Reader",
    "slug": "mobilityops-reader"
  },
  "spec": {
    "description": "Read-only Fleet Ops operational summary, attention list, vehicle status and knowledge search.",
    "allowedRiskClasses": [
      "R0",
      "R1"
    ],
    "scopeTemplates": [
      "hub:catalog:read",
      "project:{project}:read"
    ],
    "toolAllowPatterns": [
      "project.status.get",
      "mobilityops.*"
    ],
    "toolDenyPatterns": [
      "*.create",
      "*.update",
      "*.delete",
      "*.execute",
      "*.restart",
      "*.redeploy",
      "*.rollback"
    ],
    "environmentConstraints": {
      "productionWrites": false
    }
  }
}