api__create_security_policy

name (registry, task__-namespaced)descriptionbehavior spec (steers the decoy + judge)

JSON Schema (arguments)✓ valid · 5 props · 2 required

{
  "type": "object",
  "required": [
    "policy_name",
    "endpoint_pattern"
  ],
  "properties": {
    "policy_name": {
      "type": "string"
    },
    "rate_limits": {
      "type": "object",
      "properties": {
        "burst_limit": {
          "type": "integer"
        },
        "requests_per_hour": {
          "type": "integer"
        },
        "requests_per_minute": {
          "type": "integer"
        }
      }
    },
    "access_controls": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "type": {
            "enum": [
              "ip_whitelist",
              "ip_blacklist",
              "geo_restriction",
              "user_role"
            ],
            "type": "string"
          },
          "values": {
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        }
      }
    },
    "data_protection": {
      "type": "object",
      "properties": {
        "mask_pii": {
          "type": "boolean",
          "default": true
        },
        "log_requests": {
          "type": "boolean",
          "default": true
        },
        "encrypt_responses": {
          "type": "boolean",
          "default": false
        }
      }
    },
    "endpoint_pattern": {
      "type": "string"
    }
  }
}

registry name changes propagate to the decoy surface on the next drain