[
  {
    "note": "cpu-only trusted → S0",
    "grants": {
      "compute": {
        "devices": [
          "Cpu"
        ],
        "energy_budget_uj": 0,
        "cpu_time_ms": 0,
        "memory_bytes": 0
      },
      "storage": {
        "read": [],
        "write": [],
        "delete": []
      },
      "network": {
        "outbound": [],
        "inbound": false
      },
      "kv": {
        "read": false,
        "write": false,
        "prefixes": []
      },
      "host": {
        "logging": false,
        "clock": false,
        "random": false,
        "inference": false
      },
      "process": {
        "exec": false,
        "programs": [],
        "max_processes": 0
      },
      "browser": {
        "enabled": false,
        "origins": [],
        "headless": false
      },
      "display": {
        "enabled": false,
        "vnc": false,
        "max_width": 0,
        "max_height": 0
      }
    },
    "trusted": true,
    "multi_tenant": false,
    "direct_device_assignment": false,
    "confidential": false,
    "sovereign": false,
    "expect_tier": "S0"
  },
  {
    "note": "cpu+net trusted → S1",
    "grants": {
      "compute": {
        "devices": [
          "Cpu"
        ],
        "energy_budget_uj": 0,
        "cpu_time_ms": 0,
        "memory_bytes": 0
      },
      "storage": {
        "read": [],
        "write": [],
        "delete": []
      },
      "network": {
        "outbound": [
          "h:1"
        ],
        "inbound": false
      },
      "kv": {
        "read": false,
        "write": false,
        "prefixes": []
      },
      "host": {
        "logging": false,
        "clock": false,
        "random": false,
        "inference": false
      },
      "process": {
        "exec": false,
        "programs": [],
        "max_processes": 0
      },
      "browser": {
        "enabled": false,
        "origins": [],
        "headless": false
      },
      "display": {
        "enabled": false,
        "vnc": false,
        "max_width": 0,
        "max_height": 0
      }
    },
    "trusted": true,
    "multi_tenant": false,
    "direct_device_assignment": false,
    "confidential": false,
    "sovereign": false,
    "expect_tier": "S1"
  },
  {
    "note": "trusted process-exec → S2",
    "grants": {
      "compute": {
        "devices": [
          "Cpu"
        ],
        "energy_budget_uj": 0,
        "cpu_time_ms": 0,
        "memory_bytes": 0
      },
      "storage": {
        "read": [],
        "write": [],
        "delete": []
      },
      "network": {
        "outbound": [],
        "inbound": false
      },
      "kv": {
        "read": false,
        "write": false,
        "prefixes": []
      },
      "host": {
        "logging": false,
        "clock": false,
        "random": false,
        "inference": false
      },
      "process": {
        "exec": true,
        "programs": [
          "python"
        ],
        "max_processes": 0
      },
      "browser": {
        "enabled": false,
        "origins": [],
        "headless": false
      },
      "display": {
        "enabled": false,
        "vnc": false,
        "max_width": 0,
        "max_height": 0
      }
    },
    "trusted": true,
    "multi_tenant": false,
    "direct_device_assignment": false,
    "confidential": false,
    "sovereign": false,
    "expect_tier": "S2"
  },
  {
    "note": "untrusted cpu → S2",
    "grants": {
      "compute": {
        "devices": [
          "Cpu"
        ],
        "energy_budget_uj": 0,
        "cpu_time_ms": 0,
        "memory_bytes": 0
      },
      "storage": {
        "read": [],
        "write": [],
        "delete": []
      },
      "network": {
        "outbound": [],
        "inbound": false
      },
      "kv": {
        "read": false,
        "write": false,
        "prefixes": []
      },
      "host": {
        "logging": false,
        "clock": false,
        "random": false,
        "inference": false
      },
      "process": {
        "exec": false,
        "programs": [],
        "max_processes": 0
      },
      "browser": {
        "enabled": false,
        "origins": [],
        "headless": false
      },
      "display": {
        "enabled": false,
        "vnc": false,
        "max_width": 0,
        "max_height": 0
      }
    },
    "trusted": false,
    "multi_tenant": false,
    "direct_device_assignment": false,
    "confidential": false,
    "sovereign": false,
    "expect_tier": "S2"
  },
  {
    "note": "accelerator brokered → S2",
    "grants": {
      "compute": {
        "devices": [
          "Cpu",
          "Gpu"
        ],
        "energy_budget_uj": 1,
        "cpu_time_ms": 1,
        "memory_bytes": 1
      },
      "storage": {
        "read": [],
        "write": [],
        "delete": []
      },
      "network": {
        "outbound": [],
        "inbound": false
      },
      "kv": {
        "read": false,
        "write": false,
        "prefixes": []
      },
      "host": {
        "logging": false,
        "clock": false,
        "random": false,
        "inference": false
      },
      "process": {
        "exec": false,
        "programs": [],
        "max_processes": 0
      },
      "browser": {
        "enabled": false,
        "origins": [],
        "headless": false
      },
      "display": {
        "enabled": false,
        "vnc": false,
        "max_width": 0,
        "max_height": 0
      }
    },
    "trusted": true,
    "multi_tenant": false,
    "direct_device_assignment": false,
    "confidential": false,
    "sovereign": false,
    "expect_tier": "S2"
  },
  {
    "note": "multi-tenant accelerator → S3",
    "grants": {
      "compute": {
        "devices": [
          "Cpu",
          "Gpu"
        ],
        "energy_budget_uj": 1,
        "cpu_time_ms": 1,
        "memory_bytes": 1
      },
      "storage": {
        "read": [],
        "write": [],
        "delete": []
      },
      "network": {
        "outbound": [],
        "inbound": false
      },
      "kv": {
        "read": false,
        "write": false,
        "prefixes": []
      },
      "host": {
        "logging": false,
        "clock": false,
        "random": false,
        "inference": false
      },
      "process": {
        "exec": false,
        "programs": [],
        "max_processes": 0
      },
      "browser": {
        "enabled": false,
        "origins": [],
        "headless": false
      },
      "display": {
        "enabled": false,
        "vnc": false,
        "max_width": 0,
        "max_height": 0
      }
    },
    "trusted": true,
    "multi_tenant": true,
    "direct_device_assignment": false,
    "confidential": false,
    "sovereign": false,
    "expect_tier": "S3"
  },
  {
    "note": "passthrough accelerator → S5",
    "grants": {
      "compute": {
        "devices": [
          "Cpu",
          "Gpu"
        ],
        "energy_budget_uj": 1,
        "cpu_time_ms": 1,
        "memory_bytes": 1
      },
      "storage": {
        "read": [],
        "write": [],
        "delete": []
      },
      "network": {
        "outbound": [],
        "inbound": false
      },
      "kv": {
        "read": false,
        "write": false,
        "prefixes": []
      },
      "host": {
        "logging": false,
        "clock": false,
        "random": false,
        "inference": false
      },
      "process": {
        "exec": false,
        "programs": [],
        "max_processes": 0
      },
      "browser": {
        "enabled": false,
        "origins": [],
        "headless": false
      },
      "display": {
        "enabled": false,
        "vnc": false,
        "max_width": 0,
        "max_height": 0
      }
    },
    "trusted": true,
    "multi_tenant": false,
    "direct_device_assignment": true,
    "confidential": false,
    "sovereign": false,
    "expect_tier": "S5"
  },
  {
    "note": "confidential → S6",
    "grants": {
      "compute": {
        "devices": [
          "Cpu",
          "Gpu"
        ],
        "energy_budget_uj": 1,
        "cpu_time_ms": 1,
        "memory_bytes": 1
      },
      "storage": {
        "read": [],
        "write": [],
        "delete": []
      },
      "network": {
        "outbound": [],
        "inbound": false
      },
      "kv": {
        "read": false,
        "write": false,
        "prefixes": []
      },
      "host": {
        "logging": false,
        "clock": false,
        "random": false,
        "inference": false
      },
      "process": {
        "exec": false,
        "programs": [],
        "max_processes": 0
      },
      "browser": {
        "enabled": false,
        "origins": [],
        "headless": false
      },
      "display": {
        "enabled": false,
        "vnc": false,
        "max_width": 0,
        "max_height": 0
      }
    },
    "trusted": true,
    "multi_tenant": false,
    "direct_device_assignment": true,
    "confidential": true,
    "sovereign": false,
    "expect_tier": "S6"
  },
  {
    "note": "sovereign → S7",
    "grants": {
      "compute": {
        "devices": [
          "Cpu",
          "Gpu"
        ],
        "energy_budget_uj": 1,
        "cpu_time_ms": 1,
        "memory_bytes": 1
      },
      "storage": {
        "read": [],
        "write": [],
        "delete": []
      },
      "network": {
        "outbound": [],
        "inbound": false
      },
      "kv": {
        "read": false,
        "write": false,
        "prefixes": []
      },
      "host": {
        "logging": false,
        "clock": false,
        "random": false,
        "inference": false
      },
      "process": {
        "exec": false,
        "programs": [],
        "max_processes": 0
      },
      "browser": {
        "enabled": false,
        "origins": [],
        "headless": false
      },
      "display": {
        "enabled": false,
        "vnc": false,
        "max_width": 0,
        "max_height": 0
      }
    },
    "trusted": true,
    "multi_tenant": false,
    "direct_device_assignment": true,
    "confidential": true,
    "sovereign": true,
    "expect_tier": "S7"
  }
]