Intent cards

{
  "purpose_id": "customer_support_lookup",
  "allowed_actions": [
    { "operation": "postgres.select", "resource_glob": "contacts.*" }
  ],
  "forbidden_actions": [
    { "operation": "postgres.select", "resource_glob": "contacts.ssn" }
  ],
  "scope": {
    "operations": ["postgres.select"],
    "resources": ["contacts.first_name", "contacts.last_name", "contacts.email"]
  },
  "required_context": [
    { "source_card_id": "ctx:on_call", "field": "is_on_call", "required": true }
  ],
  "default_ttl_seconds": 300,
  "max_ttl_seconds": 3600,
  "on_action_outside_scope": "deny",
  "classification": {
    "match_threshold": 0.85,
    "ambiguous_floor": 0.6,
    "route_ambiguous_to_approval": true
  }
}