{
  "tools": [
    {
      "name": "postgres.query",
      "capabilities": ["read_customer_table", "customer_pii"]
    },
    {
      "name": "slack.post_message",
      "capabilities": ["write_public_channel", "external_output"]
    }
  ],
  "policy": {
    "deny_sensitive_data_export": true
  }
}