{
  "schema": "mos.egress-policy/1",
  "note": "Every non-web line the research planner can send anything out on. The web search lines (OpenAlex, Tavily, patents) are not policy lines (navigator ruling 2026-10-05): the one gate there is the run grant card showing the exact strings, and the audit ledger records every string. The older web paths (Semantic Scholar, grants.gov, research-speaker) follow the same rule since the owner decision of 2026-11-06: an approval card, a credential check and the audit record. A room file at .mindrian/egress-policy.json can only turn lines off, never on. Endpoints only, never keys.",
  "lines": {
    "vector_model_download": {
      "endpoint": "huggingface.co",
      "default": false,
      "scope": "model id only",
      "providers": ["huggingface"]
    },
    "judge_jev": {
      "endpoint": "api.typesafe.ai usefulness_judge",
      "default": false,
      "scope": "dev-time only until the navigator rules (355 D-44)",
      "providers": ["typesafe"]
    },
    "citation_check": {
      "endpoint": "api.typesafe.ai citation_check",
      "default": false,
      "scope": "off until the same navigator ruling",
      "providers": ["typesafe_citation"]
    },
    "prose": {
      "endpoint": "host session; api.anthropic.com only with a key",
      "default": true,
      "scope": "host",
      "providers": ["anthropic"]
    },
    "theo": {
      "endpoint": "Theo find_connections and the gated normalize_framework_name",
      "default": true,
      "scope": "canon handles and released terms only, per run grant",
      "providers": ["theo"]
    },
    "entity_extraction": {
      "endpoint": "api.anthropic.com Haiku",
      "default": false,
      "scope": "off inside this pipeline; its own producer owns its own line",
      "providers": ["anthropic_haiku"]
    }
  }
}