# Example enrollment
source:
  name: customer-api
  type: rest
  base_url: https://api.yourcompany.com
  auth:
    type: bearer
    token: ${CUSTOMER_API_TOKEN}

virtual_api:
  name: partner-customer-view
  source: customer-api
  endpoint: /customers

  controls:
    - type: redact
      fields:
        - ssn
        - date_of_birth

    - type: tokenize
      fields:
        - email
        - phone

  access:
    expires: 2025-12-31
    geo_allow:
      - US
      - EU

# REST API
curl -H "Authorization: Bearer YOUR_API_KEY" \
  https://harbor.dataharbor.dev/v1/partner-customer-view/customers

# Response: governed data with controls applied
{
  "customers": [
    {
      "id": "cust_123",
      "name": "Jane Doe",
      "email": "tok_abc123",      // tokenized
      "phone": "tok_def456",      // tokenized
      "ssn": "",                  // redacted
      "date_of_birth": ""         // redacted
    }
  ]
}