{
  "schemaVersion": 1,
  "policyVersion": 0,
  "environment": "unknown",
  "issuedAt": "2026-06-10T17:57:13.807Z",
  "validFrom": "2026-06-10T17:57:13.807Z",
  "validUntil": "2026-06-10T17:57:12.808Z",
  "providers": [],
  "signature": "",
  "note": "PLACEHOLDER — no signed policy injected at build time. Clients MUST reject this: validUntil is in the past and providers is empty. Per ADR-0002 §Fail-closed semantics, this means the gateway is not yet provisioned and inference requests should not be sent. The publish workflow (per ADR-0014 §Publication) overwrites this file on every real ceremony."
}