UpsertControllerPolicyInput

"""Input for upserting a controller policy. Idempotent on controllerId."""
input UpsertControllerPolicyInput {
  """Target controller (idempotent on this field)"""
  controllerId: ControllerID!
  """Prefix-allowlist for filesystem IO. Empty list = deny all."""
  allowedIoPaths: [String!]!
  """Absolute-path allowlist for exec. Empty list = deny all."""
  allowedExecBinaries: [String!]!
}