{
  "review_id": "sec_tokenops_runtime_001",
  "runtime_surface": "tokenops",
  "identity_binding": {
    "agent_id": "agent_redwood_ops",
    "client_id": "client_harbor_income_pool",
    "credential_envelope_id": "cred_env_tokenops_001",
    "trust_status": "approved",
    "allowed_tools": [
      "tokenops"
    ]
  },
  "secret_review": {
    "service_role_server_only": true,
    "provider_secret_env_var": "STRIPE_STABLECOIN_WEBHOOK_SECRET",
    "webhook_secret_env_var": "WEVER_PROVIDER_WEBHOOK_SECRET",
    "public_json_contains_secrets": false
  },
  "validation_controls": {
    "schema_version_required": true,
    "callback_url_validation": "https_only_allowlist",
    "provider_signature_verification": "required_before_credit_funding",
    "tool_route_allowlist": [
      "tokenops",
      "financeops",
      "energyops"
    ]
  },
  "audit_controls": {
    "write_audit_event": true,
    "audit_event_types": [
      "runtime_write",
      "provider_confirmation",
      "credit_funding",
      "callback_delivery",
      "retry_command",
      "kill_switch_change"
    ],
    "console_visibility": true
  },
  "kill_switch": {
    "provider_route_enabled": true,
    "callback_delivery_enabled": true,
    "controlled_pilot_enabled": true
  }
}