Initial SQL-only 1C adapter baseline

plugins/1c/connector/policies/xml-decoding-reference-policy.yaml

@@ -0,0 +1,45 @@
+id: 1c-xml-decoding-reference-policy
+status: active
+summary: "XML exports are offline decoding evidence only; the running adapter is SQL-only."
+
+offline_analysis:
+  allowed: true
+  purposes:
+    - discover_metadata_kinds
+    - enumerate_declared_properties
+    - correlate_object_guids
+    - infer_binary_config_paths
+    - build_decoder_tests_and_fixtures
+  layer_rule: "Base configuration and every extension must be analyzed as separate layers."
+  output_rule: "Promote only generic, evidence-backed format rules and tests into the adapter; do not promote configuration-specific XML values as live answers."
+
+runtime:
+  source: sql_only
+  configured_by: base_id
+  settings:
+    - server
+    - database
+    - user
+    - password_or_password_env
+  xml_mount_required: false
+  xml_environment_variables_allowed: false
+  rejected_payload_arguments:
+    - xml_path
+    - xml_root
+    - meta_xml_path
+    - form_xml_path
+    - configuration_xml
+    - configuration_xml_path
+    - config_dump_info
+    - config_dump_info_path
+  rules:
+    - "Runtime metadata and data answers must be derived from the selected base_id SQL connection."
+    - "Runtime must not read Configuration.xml, ConfigDumpInfo.xml, form XML, extension XML, or an XML-derived object-value cache."
+    - "XML-derived decoder rules must remain generic and must be verified against live SQL bytes."
+    - "An XML export may differ from live extensions and therefore cannot establish the current runtime extension state."
+
+writes:
+  rule: "This policy does not broaden SQL write scope. Only the saved-state exceptions in sql-base-access-policy.yaml apply."
+  allowed_tables:
+    - ConfigSave
+    - ConfigCASSave