# README.md §7.1
name: Sales.Read
owner: sales-platform
environment: production
risk_ceiling: R1
allowed_tools:
  - sales.customer.search
  - sales.customer.get
  - sales.order.get
  - sales.inventory.check
credential_policy:
  workload_identity: true
  short_lived: true
audit:
  level: full