[
  {
    "slug": "public-read",
    "name": "Public Read",
    "description": "Unauthenticated read access for public catalogs and docs."
  },
  {
    "slug": "hub-write",
    "name": "Hub Write",
    "description": "Authenticated write access for hub-owned resources."
  },
  {
    "slug": "operator-admin",
    "name": "Operator Admin",
    "description": "Privileged operator scope for administration."
  }
]