# Portfolio Agent role: public visitor access via portfolio site
name: portfolio-agent
description: Public visitor access - read public docs, manage own conversations

rules:
  # Can read/query public wiki and embeddings from allowed projects
  - resources: [wiki, embedding]
    verbs: [read, query]
    scope:
      projects: [homelab, rbc, aws, portfolio]
      visibility: public

  # Can read/write own conversations in portfolio project only
  - resources: [conversation]
    verbs: [read, write]
    scope:
      projects: [portfolio]
      owner: self