{
  "id": "orch-primitive:kradle-permission-review",
  "_kind": "OrchestrationPrimitive",
  "_file": "agent-stack/interaction-primitives/kradle-orchestration.yaml",
  "_cluster": "agent-stack",
  "attributes": {
    "displayName": "Kradle Permission Review",
    "description": "Pre-dispatch RBAC audit. Before launching an agent, reviews the\nagent stack's service account bindings, secret grants, config\ngrants, and tool profile against the org's policy profiles.\nBlocks dispatch if any required permission is missing or denied.\n",
    "kind": "budget-control",
    "trigger": "on-state-change"
  },
  "outgoingEdges": [
    {
      "from": "orch-primitive:kradle-permission-review",
      "to": "layer:10-interaction",
      "kind": "realizes",
      "attributes": {}
    }
  ],
  "incomingEdges": [
    {
      "from": "platform:kradle",
      "to": "orch-primitive:kradle-permission-review",
      "kind": "supports_orchestration_primitive",
      "attributes": {}
    }
  ]
}