{"productionTouched":false,"databaseTouched":false,"rawImageUploadAllowed":false,"rawImageStorageAllowed":false,"rawProviderPayloadStorageAllowed":false,"providerExecutionAllowed":false,"httpClientWired":false,"networkExecutionAllowed":false,"credentialAccessAllowed":false,"tokenAccessAllowed":false,"n8nExecutionAllowed":false,"contactsAgentExecutionAllowed":false,"googleContactsReadAllowed":false,"googleContactsWriteAllowed":false,"completionNotificationAllowed":false,"featureFlagEnabled":false,"adapterEnabled":false,"handoffOnly":true,"handoffMode":"ocr-provider-strict-control-owner-handoff-only","requiredStrictControlRequestReadiness":"ready-for-ocr-provider-strict-control-request","endpoints":[{"method":"GET","path":"/contact-capture/ocr-provider-strict-control-owner-handoff-policy"},{"method":"POST","path":"/contact-capture/ocr-provider-strict-control-owner-handoff-plan"}],"handoffRequires":["ready OCR provider Strict Control request packet","adapter implementation reference and fingerprint","raw-image retention, redaction, credential-owner, backup, rollback, operator approval, and post-OCR verification references","fresh explicit owner approval before any later live OCR action"],"blockedActions":["enable OCR provider feature flag","enable OCR provider adapter","upload raw image","store raw image","store raw provider payload","execute OCR provider","wire HTTP runtime","access credentials or OAuth tokens","execute n8n or Contacts Agent","read or write Google Contacts","write database or touch production","send completion notification"],"stopConditions":["A raw image, provider payload, credential, token, or base64 data would be included in the handoff.","The handoff would be treated as live OCR approval.","Feature flag, adapter, HTTP runtime, provider execution, or network access would be enabled from this endpoint.","Production, database, n8n, Google Contacts, or completion notification behavior would change."],"nextStep":"Use this handoff only to review a later live OCR provider window; do not enable OCR, upload images, wire HTTP, access credentials, or touch production from this endpoint."}