{"schema_version":"1.0","service":"platphorm-calendar","policyMode":"enforced-by-route-handlers","auth":{"requiredForProtected":"PLATPHORM_API_KEY","acceptedHeaders":["Authorization: Bearer $PLATPHORM_API_KEY","X-PlatPhorm-API-Key: $PLATPHORM_API_KEY"],"serviceSpecificKeys":"unsupported"},"publicReadAccess":["calendar shell","public-safe event lists","public-safe ICS/RSS/feed/sitemap/discovery files","health summaries","read-only MCP introspection","browser-local non-sensitive IndexedDB events"],"protectedActions":["server event create/update/delete/cancel","private calendar management","private attendee/reminder mutation","Onboard/Jules/Kanban sync","webhook and report generation","MCP tool execution"],"trustedNetworks":[{"name":"platphormnews","domains":["*.platphormnews.com"]}],"blockedTargets":["localhost","private-ip-ranges","link-local","metadata-services"],"localPersistencePolicy":"IndexedDB is used only for non-sensitive local calendar events and drafts when backend persistence is unavailable. PLATPHORM_API_KEY is never stored in browser storage.","calendarExportPolicy":"Public-safe events may be exported as ICS and Google add-links. Private server exports require PLATPHORM_API_KEY.","integrationPolicy":"Onboard, Jules, and Kanban data is imported only through protected operator requests or honest degraded status endpoints.","tracePolicy":"Calendar accepts W3C trace context, emits safe calendar spans, and excludes secrets, private attendees, private notes, and PLATPHORM_API_KEY.","vercelMetadataPolicy":"Only safe Vercel metadata may be captured; raw credentials, cookies, sessions, and raw IPs are excluded.","requiredPolicyLine":"Web calendar viewing, public-safe event discovery, browser-based local calendar persistence, iCalendar export, Google/Outlook add-to-calendar support, Onboard/Jules/Kanban schedule integration, trusted-domain discovery, standard route compliance, Vercel metadata capture, trace-linked calendar operations, and MCP calendar discovery are intentionally supported for public read-only and operator workflows. Mutating, administrative, protected event persistence, integration sync, reminder management, publishing, reporting, and write actions require PLATPHORM_API_KEY.","securityContact":"mailto:Michael@Barbineworldwide.com","traceability":{"required":true,"traceHeader":"X-Platphorm-Trace-Id","sessionHeader":"Mcp-Session-Id"}}