{"success":true,"filters":{"role":null,"firstWedge":null,"status":"restricted","risk":null,"tool":null,"search":null},"summary":{"profiles":2,"firstWedgeRole":null,"tools":3,"approved":0,"restricted":3,"reviewRequired":0,"highRisk":3,"policyGates":10},"profiles":[{"id":"approved-tool-catalog-engineering","role":"engineering","roleLabel":"Engineering","productLine":"AIducation for Engineering","firstWedge":false,"academyPath":"/ai-training/engineering","catalogName":"Engineering Approved AI Tool Catalog","owner":"IT, security, and department enablement","reviewCadence":"Monthly","tools":[{"slug":"cursor","name":"Cursor","category":"coding","status":"restricted","risk":"high","allowedUse":"Use Cursor for approved engineering practice missions, drafts, analysis, or workflow support with verification.","restrictedUse":"Generated code needs review","missionCount":3,"capabilityChecks":["Tool is mapped to role-specific missions","Learner completes verification before external use","Manager can review the saved artifact and rubric result","Admin approval is required before live workflow automation","Credential scope, audit logging, and rollback plan are documented"],"allowedDataClasses":["Redacted sensitive records only","Manager-approved samples","Sandbox credentials"],"blockedDataClasses":["Production credentials","unredacted regulated data","live customer actions","security secrets"],"approvalEvidence":["Cursor approval status and catalog version","Cursor mission completion and verification score","Allowed data class acknowledgment","Manager or admin exception record when required"],"trainingPath":"/api/tool-missions?role=engineering&tool=cursor","capabilities":["Codebase Q&A","Agent edits","Debugging","Refactoring"]}],"policyGates":["Tool is approved for the learner role and workflow","Data class is allowed for the tool and plan tier","Prompt or workflow starts from an approved library item when available","Output is verified against source, policy, calculation, or code evidence","Restricted tools require manager or admin approval before live use"],"adminControls":["Approve, restrict, or retire tools by role","Set allowed data classes and blocked data classes","Require manager review for high-risk workflows","Export tool approval, mission, and exception evidence","Route misuse reports into the governance center"],"auditEvidence":["Policy training completion","Approved tool mission result","Scenario attempt and rubric score","Prompt and workflow artifact links","Misuse reporting drill evidence","Credential or portfolio verification link","Approved tool catalog version","Prompt and workflow library version","Manager action and export timestamp","Engineering Company AI Academy launch configuration","Approved tool status history","Restricted tool exception approvals","Tool mission and verification completion"],"integrationDestinations":["SSO and SCIM group mapping","LMS completion exports","HRIS certification registry","Slack or Teams manager alerts","Audit warehouse or GRC system"],"summary":{"approved":0,"restricted":1,"reviewRequired":0,"highRisk":1}},{"id":"approved-tool-catalog-operations","role":"operations","roleLabel":"Operations","productLine":"AIducation for Operations","firstWedge":false,"academyPath":"/ai-training/operations","catalogName":"Operations Approved AI Tool Catalog","owner":"IT, security, and department enablement","reviewCadence":"Monthly","tools":[{"slug":"zapier","name":"Zapier","category":"automation","status":"restricted","risk":"high","allowedUse":"Use Zapier for approved operations practice missions, drafts, analysis, or workflow support with verification.","restrictedUse":"Workflow errors can scale quickly","missionCount":3,"capabilityChecks":["Tool is mapped to role-specific missions","Learner completes verification before external use","Manager can review the saved artifact and rubric result","Admin approval is required before live workflow automation","Credential scope, audit logging, and rollback plan are documented"],"allowedDataClasses":["Redacted sensitive records only","Manager-approved samples","Sandbox credentials"],"blockedDataClasses":["Production credentials","unredacted regulated data","live customer actions","security secrets"],"approvalEvidence":["Zapier approval status and catalog version","Zapier mission completion and verification score","Allowed data class acknowledgment","Manager or admin exception record when required"],"trainingPath":"/api/tool-missions?role=operations&tool=zapier","capabilities":["App automation","AI actions","Notifications","Lead routing"]},{"slug":"n8n","name":"n8n","category":"automation","status":"restricted","risk":"high","allowedUse":"Use n8n for approved operations practice missions, drafts, analysis, or workflow support with verification.","restrictedUse":"Requires stronger technical ownership","missionCount":3,"capabilityChecks":["Tool is mapped to role-specific missions","Learner completes verification before external use","Manager can review the saved artifact and rubric result","Admin approval is required before live workflow automation","Credential scope, audit logging, and rollback plan are documented"],"allowedDataClasses":["Redacted sensitive records only","Manager-approved samples","Sandbox credentials"],"blockedDataClasses":["Production credentials","unredacted regulated data","live customer actions","security secrets"],"approvalEvidence":["n8n approval status and catalog version","n8n mission completion and verification score","Allowed data class acknowledgment","Manager or admin exception record when required"],"trainingPath":"/api/tool-missions?role=operations&tool=n8n","capabilities":["Self-hosted workflows","API integrations","AI agent steps"]}],"policyGates":["Tool is approved for the learner role and workflow","Data class is allowed for the tool and plan tier","Prompt or workflow starts from an approved library item when available","Output is verified against source, policy, calculation, or code evidence","Restricted tools require manager or admin approval before live use"],"adminControls":["Approve, restrict, or retire tools by role","Set allowed data classes and blocked data classes","Require manager review for high-risk workflows","Export tool approval, mission, and exception evidence","Route misuse reports into the governance center"],"auditEvidence":["Policy training completion","Approved tool mission result","Scenario attempt and rubric score","Prompt and workflow artifact links","Misuse reporting drill evidence","Credential or portfolio verification link","Approved tool catalog version","Prompt and workflow library version","Manager action and export timestamp","Operations Company AI Academy launch configuration","Approved tool status history","Restricted tool exception approvals","Tool mission and verification completion"],"integrationDestinations":["SSO and SCIM group mapping","LMS completion exports","HRIS certification registry","Slack or Teams manager alerts","Audit warehouse or GRC system"],"summary":{"approved":0,"restricted":2,"reviewRequired":0,"highRisk":2}}]}