{
  "registry": "grip.boundaries",
  "grip": "1.0-draft.2",
  "source": "§4.4 model.call — models as governed workers",
  "extension_policy": "Public proposal. A child Grant's boundary set MUST be a superset of its parent's — constraints are added, never dropped (§4.3.2 law 1).",
  "boundaries": [
    { "label": "no-public-cloud", "meaning": "resolution must not egress to a shared multi-tenant provider endpoint" },
    { "label": "no-training", "meaning": "provider contract must exclude the payload from model training" },
    { "label": "region-eu", "meaning": "resolution and retention confined to EU regions" },
    { "label": "region-us", "meaning": "resolution and retention confined to US regions" },
    { "label": "zero-retention", "meaning": "provider contract must specify no payload retention at rest" }
  ]
}