{
  "schema_version": "1.0",
  "evidence_key": "native-permission-enforcement",
  "template_only": true,
  "category": "external",
  "source_type": "runtime-permission-guard",
  "submitted_by": "target client or installer integrator",
  "submitted_at": "YYYY-MM-DD",
  "summary": "A real target or installer guard enforces approved high-permission capabilities at runtime.",
  "artifact_refs": [
    {
      "path": "reports/runtime_permission_probes.json",
      "kind": "runtime-probe-report",
      "contains_raw_content": false,
      "note": "Must show native_enforcement_count > 0 and failure_count == 0 for target-native completion; installer_enforcement_pass_count is supporting local evidence only."
    },
    {
      "path": "reports/install_simulation.json",
      "kind": "installer-enforcement-report",
      "contains_raw_content": false,
      "note": "Shows local package installer enforcement. This does not replace target-native or external runtime guard evidence."
    },
    {
      "path": "dist/targets/<target>/adapter.json",
      "kind": "target-adapter",
      "contains_raw_content": false,
      "note": "Adapter may claim native enforcement only when the target really enforces it."
    }
  ],
  "provenance": {
    "target": "openai|claude|generic|vscode|other",
    "guard_location": "client or installer component",
    "guard_scope": "target-client-native",
    "guard_blocks_undeclared_capability": true,
    "metadata_fallback_retained_for_other_targets": true,
    "notes": "Use target-client-native for client-enforced guards or external-installer-runtime-guard for a real external installer guard."
  },
  "privacy": {
    "raw_user_content_included": false,
    "raw_provider_prompt_included": false,
    "credentials_included": false,
    "secrets_included": false,
    "notes": "Runtime guard proof should avoid environment dumps."
  },
  "anti_overclaim": {
    "planned_work_counts_as_evidence": false,
    "metadata_fallback_counts_as_native_enforcement": false,
    "pending_review_counts_as_human_decision": false,
    "local_command_runner_counts_as_provider_model": false
  },
  "attestation": {
    "real_external_or_human_evidence": false,
    "reviewer_or_operator_identity_present": false,
    "artifact_refs_reviewed": false,
    "privacy_contract_satisfied": false,
    "ledger_reviewer_approved": false,
    "ledger_reviewer": "",
    "ledger_reviewed_at": "",
    "notes": "Copy this template into submissions/ only after a real client or installer guard exists."
  }
}