{
  "schemaVersion": 1,
  "policyVersion": 0,
  "environment": "unknown",
  "issuedAt": "2026-06-12T00:23:42.055Z",
  "validFrom": "2026-06-12T00:23:42.055Z",
  "validUntil": "2026-06-12T00:23:41.058Z",
  "providers": [],
  "signature": "",
  "note": "PLACEHOLDER — no signed policy injected at build time. Clients MUST reject this: validUntil is in the past and providers is empty. Per ADR-0002 §Fail-closed semantics, this means the gateway is not yet provisioned and inference requests should not be sent. The publish workflow (per ADR-0014 §Publication) overwrites this file on every real ceremony."
}