지원 OAuth / credential
→ 검증된 AI Identity
→ AI Access policy
→ Permission Object / Group
→ 승인된 target

set ai-identity <NAME>
show ai-identities
show ai-identity <NAME>

set permission-object read-only permissions host-info,process-read,file-read
set ai-access claude-prod mode whitelist source claude destination production-servers permission read-only enabled
test ai-access source claude destination production-servers permission read-only