{
  "apiVersion": "hub.example.com/v1alpha1",
  "kind": "Policy",
  "metadata": {
    "name": "038 ProjectBrain Analysis Operations",
    "slug": "038-projectbrain-analysis-operations"
  },
  "spec": {
    "priority": 38,
    "description": "Allow only the bounded ProjectBrain analysis job mutations for clients that already hold an enabled inherited Gitea portfolio binding.",
    "match": {
      "project": "gitea-analysis",
      "environmentClassifications": ["production"],
      "connectors": ["projectbrain"],
      "riskClasses": ["R2"],
      "toolPatterns": [
        "projectbrain.analysis.start",
        "projectbrain.analysis.cancel"
      ]
    },
    "conditions": {
      "requireEnabledClient": true,
      "requireBinding": true,
      "maxArgumentBytes": 65536
    },
    "decision": "allow_if_conditions",
    "terminal": true
  }
}