# README.md §7.2, §17 (R1)
name: Finance.Read
owner: finance-platform
environment: production
risk_ceiling: R1
allowed_tools:
  - finance.invoice.get
credential_policy:
  workload_identity: true
  short_lived: true
audit:
  level: full