curl "http://localhost:8000/api/v2/agents/my-agent/policy" \
  -H "X-Session-Token: your_session_token"

{
  "agent_id": "my-agent",
  "is_empty": false,
  "policy": {
    "version": 1,
    "retention": {
      "context": "7d",
      "event": "30d",
      "error": "30d",
      "observation": "60d",
      "commitment": "90d",
      "artifact": "180d"
    },
    "rules": [
      {
        "name": "pinned",
        "match": { "tags": ["pinned"] },
        "expire_after": "never"
      },
      {
        "name": "low-confidence-guesses",
        "match": { "provenance": ["inferred"], "confidence_below": 0.5 },
        "expire_after": "14d"
      }
    ],
    "purge_expired_after": "never"
  }
}

{
  "agent_id": "my-agent",
  "is_empty": true,
  "policy": {
    "version": 1,
    "retention": {},
    "rules": [],
    "purge_expired_after": "never"
  }
}

{
  "detail": "Missing session token. Use X-Session-Token header."
}