name: external-automation-standing
version: 0.1.0
doctrinal_basis: >-
  Restricted engagement zones and escalation of force principles adapted to
  outbound automation surfaces.
description: Standing controls for outbound automations and third-party execution.
rules:
  - id: deny-new-webhook-destinations
    applies_to:
      action_class:
        - external.webhook.create
        - external.webhook.update
    decision: deny
    reasoning: >-
      Creating or retargeting webhook destinations is denied by standing policy.

  - id: escalate-mass-messaging
    applies_to:
      action_class:
        - external.email.bulk_send
        - external.sms.bulk_send
    decision: escalate
    escalation:
      requires: human_approval
      via: communications-ops
    reasoning: >-
      Bulk outbound communication requires operator approval and campaign review.