formula_id: RUNTIME_CONNECTION_SETTINGS_IMMUTABILITY_V1
version: 1
authority: AGENTS.md
setting_key: ConnectionStrings__DefaultConnection
owner: operations
policy:
  source: runtime_environment_or_external_settings
  application_may_read: true
  application_may_write: false
  secret_value_in_repository: allowed_only_when_explicitly_restoring_authoritative_git_value
evidence: Temp/runtime_connection_settings_immutability_v1.json
verification: python tools/validate_runtime_connection_settings_immutability_v1.py