{
  "id": "gate/write-copy",
  "regime": "conformance",
  "profile": "GACS-E1",
  "claim": "table-policy",
  "harness": "query",
  "policy": "policies/sql-gate.json",
  "query": "COPY public.customers TO STDOUT",
  "rationale": "A write token is refused on a read-only gate.",
  "doesNotTest": "Whether the database role itself could execute the write if the gate were bypassed.",
  "sourceVector": "test-vectors/sql-gate/vectors.json#write-copy",
  "expect": "deny"
}