# personal-rw — materialized from live OpenBAO (policy-as-code).
path "personal/data/*"      { capabilities=["create","read","update","patch","delete","list"] }
path "personal/metadata/*"  { capabilities=["read","list","delete"] }
path "personal/metadata"    { capabilities=["list"] }
path "personal/delete/*"    { capabilities=["update"] }
path "personal/undelete/*"  { capabilities=["update"] }
path "personal/destroy/*"   { capabilities=["update"] }