{"success":true,"filters":{"layer":"content","visibility":null,"search":null},"summary":{"profiles":1,"layers":1,"visibilityModes":4,"roles":5,"apiScopes":3,"evidenceItems":3},"profiles":[{"id":"access-content","layer":"content","name":"Content visibility and lifecycle","purpose":"Control whether courses, scenarios, skill atoms, scenario seeds, rubric contracts, and tool scripts are public, org-only, private, or draft.","enforcementPoint":"resolveContentVisibility, resolveRequestedVisibility, lifecycle controls, and admin publishing","failClosedRule":"Non-platform admins cannot publish public content; draft content does not become learner-facing evidence.","visibilityModes":[{"mode":"public","learnerAccess":"Active global content can be browsed without tenant context.","managerAccess":"Managers can use public content as academy defaults.","adminAccess":"Only platform admins can publish true public content."},{"mode":"org-only","learnerAccess":"Learners can read active content assigned to their organization.","managerAccess":"Managers can inspect team evidence inside their organization.","adminAccess":"Tenant admins and instructors can manage content inside their organization."},{"mode":"private","learnerAccess":"Only the creator or permitted manager can inspect the artifact.","managerAccess":"Managers use private evidence for coaching, not broad publishing.","adminAccess":"Admins can manage private content only inside their allowed tenant boundary."},{"mode":"draft","learnerAccess":"Learners cannot use drafts as readiness evidence.","managerAccess":"Managers can review drafts only when they are content managers.","adminAccess":"Admins and instructors review drafts before publishing."}],"roles":[{"role":"owner","permissions":["billing","branding","identity","all academy settings"],"boundary":"Own organization or platform scope when explicitly platform-admin."},{"role":"admin","permissions":["content approval","integration setup","org reports"],"boundary":"Own organization and assigned academy surfaces."},{"role":"manager","permissions":["team dashboards","coaching reports","export readiness evidence"],"boundary":"Own organization and assigned academy surfaces."},{"role":"instructor","permissions":["scenario drafts","rubric drafts","learner feedback"],"boundary":"Own organization and assigned academy surfaces."},{"role":"viewer","permissions":["read-only dashboards","credential registry"],"boundary":"Own organization and assigned academy surfaces."}],"apiScopes":["courses:read","courses:write","all:write"],"evidence":["Draft content requires admin or instructor review","Org-only content powers company academies without leaking source context","Public credentials can verify proof without exposing private scenario details"],"implementationRefs":["src/lib/content-access.ts","src/lib/validation.ts","src/app/(admin)/admin/components/ContentLifecycleControls.tsx","src/lib/db/schema.ts"]}]}