{
  "actions": [
    {
      "capability": "cap:db-read-customerdb-claims",
      "decision": "allow",
      "effect": "db.read.CustomerDB.claims",
      "receipt_required": true
    },
    {
      "approval_required": true,
      "capability": "cap:http-call-refundapi-issue-refund",
      "decision": "escalate",
      "effect": "http.call.RefundAPI.issue_refund",
      "postcondition": {
        "event": "http.call.RefundAPI.issue_refund.completed",
        "verify": "receipt.effect == \"http.call.RefundAPI.issue_refund\""
      },
      "receipt_required": true
    }
  ],
  "credential_custody": "server_side_only",
  "default_decision": "deny",
  "gate_id": "gate:capsule",
  "target": "claims-refund-reviewer",
  "version": "1.2.0"
}