Redacted excerpt; full evidence withheld.

$ Get-ChildItem -Force; Get-Content README.md; git status --short --branch
exit: 1
ed_ports`.

Policy files must be UTF-8, at most 1,000,000 bytes (including whitespace), and at most 16 nested object/array levels, counting the root object as level 1. Brackets inside strings do not count. Size and nesting are checked before JSON decoding; excessive input produces a clean policy error with exit code 2. Malformed field types are rejected with a field-specific error. Error messages show at most the first 80 characters of an echoed string, escaped for display, and mark truncation with its original length. Unexpected processing errors also produce a clean policy error in the CLI; direct library calls expose unexpected exceptions for debugging and tests.

The tool cannot discover LAN hosts, confirm that a route exists, identify which Tailscale device runs an agent, validate a full tailnet policy offline, or guarantee restrictions when combined with other grants. The owner must supply each scoped agent's required LAN hosts and ports, the private address for each host, and arrange suitable Tailscale device tags and LAN routes. No real network values belong in this repository; `policy.local.
[excerpt truncated]