{
  "canon_meta": {
    "canon_id": "devon-sandbox-environments",
    "version": "1.0.0",
    "status": "ACTIVE",
    "mode": "sandbox_first"
  },
  "sandbox_policy": {
    "direct_production_development_allowed": false,
    "mandatory_flow": [
      "identify_project",
      "locate_source_environment",
      "create_or_refresh_sandbox",
      "apply_sanitization_policy",
      "validate_minimum_parity",
      "develop_in_sandbox",
      "validate_in_sandbox",
      "benchmark_if_required",
      "enforce_promotion_gate",
      "promote_to_production",
      "audit_release",
      "keep_rollback_ready"
    ]
  },
  "sandbox_contract_schema": {
    "required_fields": [
      "project_id",
      "sandbox_id",
      "source_environment",
      "target_environment",
      "mirror_strategy",
      "config_masking_policy",
      "data_sanitization_policy",
      "secrets_policy",
      "network_policy",
      "validation_suite",
      "promotion_gate",
      "rollback_strategy",
      "parity_rules",
      "ttl_or_lifecycle_policy"
    ]
  },
  "sandbox_types": [
    "code_sandbox",
    "runtime_sandbox",
    "infra_sandbox",
    "data_sandbox"
  ],
  "future_hypothesis": {
    "dedicated_sandbox_host_possible": true,
    "dedicated_sandbox_host_reason": "isolate heavy build/test/mirroring workloads from control plane and production nodes"
  },
  "status_rules": {
    "PASS": "sandbox contract exists, mirror strategy defined, parity validation defined and sandbox validation passes",
    "FAIL": "sandbox exists but parity/validation/promotion checks fail",
    "MISSING": "sandbox environment or contract evidence does not exist"
  }
}