{
  "policy_id": "api-policy-default-v1",
  "auth": {"scheme": "api_key_reference", "secret_transport": "server_side_secret_store", "rotation_required": true},
  "tenant_isolation": {"tenant_id_required": true, "cross_tenant_reads": false, "cross_tenant_writes": false},
  "quotas": {"requests_per_minute": 60, "max_concurrent_jobs": 2, "max_asset_bytes": 25000000},
  "idempotency": {"required_for_mutating_requests": true, "replay_same_result": true, "key_ttl_seconds": 86400},
  "secrets_excluded": true
}