{
  "traceId": "trace-2026-03-03-001",
  "contractId": "vendor-access-control",
  "contractVersion": "2.4.0",
  "policyPackVersion": "pack-1.0.0",
  "decision": "constrain",
  "reasonCode": "NET_ALLOWLIST_ONLY",
  "confidenceState": "medium",
  "request": {
    "decisionType": "allow_or_constrain",
    "actionType": "network_request",
    "targetDomain": "api.vendor-example.com",
    "environment": "uat"
  },
  "constraints": {
    "allowedDomains": [
      "api.vendor-example.com",
      "status.vendor-example.com"
    ],
    "maxRuntimeSeconds": 30,
    "sandboxRequired": true
  },
  "evidence": {
    "reviewPath": "standard-security-review",
    "escalationRequired": false
  },
  "timestampUtc": "2026-03-03T00:00:00Z"
}