{"productionTouched":false,"databaseTouched":false,"rawImageUploadAllowed":false,"rawImageStorageAllowed":false,"rawProviderPayloadStorageAllowed":false,"providerExecutionAllowed":false,"httpClientWired":false,"networkExecutionAllowed":false,"credentialAccessAllowed":false,"tokenAccessAllowed":false,"n8nExecutionAllowed":false,"contactsAgentExecutionAllowed":false,"googleContactsReadAllowed":false,"googleContactsWriteAllowed":false,"completionNotificationAllowed":false,"featureFlagEnabled":false,"adapterEnabled":false,"verifiedOcrTextProduced":false,"localRunbookOnly":true,"runbookMode":"ocr-provider-live-window-owner-review-only","requiredOwnerHandoffReadiness":"ready-for-ocr-provider-strict-control-owner-handoff","endpoints":[{"method":"GET","path":"/contact-capture/ocr-provider-live-window-runbook-policy"},{"method":"POST","path":"/contact-capture/ocr-provider-live-window-runbook-plan"}],"runbookRequires":["ready OCR provider owner handoff reference and fingerprint","ready Strict Control request and default-off adapter implementation references","backup, rollback, retention, redaction, credential-owner, budget, operator review, and post-OCR verification references","fresh explicit owner approval before any later feature flag enablement, raw image upload, HTTP runtime wiring, provider execution, credential/token access, or production work","no-effect confirmations proving this endpoint is runbook-only"],"blockedActions":["enable OCR provider feature flag","enable OCR provider adapter","upload raw image","store raw image","store raw provider payload","execute OCR provider","wire HTTP runtime","start network execution","access credentials or OAuth tokens","execute n8n or Contacts Agent","read or write Google Contacts","write database or touch production","produce verified OCR text","send completion notification"],"stopConditions":["A raw image, provider payload, credential, token, or base64 data would be included in the runbook.","The runbook would be treated as live OCR approval.","Feature flag, adapter, HTTP runtime, provider execution, or network access would be enabled from this endpoint.","Production, database, n8n, Google Contacts, verified OCR text, or completion notification behavior would change."],"nextStep":"Use this runbook only to review a future live OCR provider window; ask the owner again before OCR execution, raw image upload/storage, HTTP wiring, credential access, network calls, database writes, completion notifications, or production work."}