{
  "schema": "rabbit-operations-policy-r3",
  "version": "rabbit-operations-policy-r3-20261016",
  "enforcedBy": "Rabbit Commander MCP server",
  "remoteClients": "Central policy for website, ChatGPT, Claude, Gemini and compatible MCP clients",
  "autoApproved": "Exact read-only diagnostics only when Safe Auto is selected",
  "manualApproval": "Writes, mkdir, move, process actions, builds, deployments and privilege changes",
  "g2Build": "NOT_AUTHORIZED_C1_01_DENIAL_UNCHANGED",
  "customerExecution": "NOT_ENABLED_BY_THIS_POLICY",
  "remoteAgentUpdated": false,
  "note": "Safe Auto is opt-in; no existing modes or root/KVM rights are changed."
}