CreateControllerPolicyInput

"""Input for creating a controller policy."""
input CreateControllerPolicyInput {
  """Target controller (must exist in this tenant)"""
  controllerId: ControllerID!
  """Prefix-allowlist for filesystem IO. Empty list = deny all."""
  allowedIoPaths: [String!]!
  """Absolute-path allowlist for exec. Empty list = deny all."""
  allowedExecBinaries: [String!]!
}