{
  "action": "allow",
  "emergencyEligible": false,
  "id": "GPR-007",
  "limitations": [
    "Replace the example domain with an organization-reviewed destination before applying."
  ],
  "matcher": {
    "kind": "domain",
    "value": "trusted.example.com"
  },
  "reviewedAt": "2026-08-09",
  "risk": "low",
  "schemaVersion": "guard-policy-recipe/v1",
  "slug": "allow-trusted-domain",
  "summary": "Allow network actions to a domain that your team has explicitly reviewed and approved.",
  "templateId": "allow-trusted-domain",
  "tests": [
    {
      "expected": "allow",
      "label": "matching synthetic case",
      "matcherKind": "domain",
      "value": "trusted.example.com"
    },
    {
      "expected": "unmatched",
      "label": "different benign synthetic case",
      "matcherKind": "domain",
      "value": "benign-trusted.example.com"
    }
  ],
  "threatSlugs": [],
  "title": "Allow a reviewed domain"
}