export interface PolicyEnvelope { project_id?: string; scope?: 'user' | 'project' | 'team'; allowed_models?: string[]; retention_ttl?: string; sensitivity?: 'public' | 'internal' | 'confidential' | 'restricted'; }