From d086be06380c984f8050e6e459178b76ea1874cb Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 11 Aug 2026 12:49:04 +0000
Subject: [PATCH] docs: document permissions-required in front-matter.md

---
 docs/front-matter.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docs/front-matter.md b/docs/front-matter.md
index 2f4c1368..1c5d5dd9 100644
--- a/docs/front-matter.md
+++ b/docs/front-matter.md
@@ -268,6 +268,9 @@ permissions:                   # optional ADO access token configuration (see do
                                  # Default: executor uses $(System.AccessToken).
                                  # Set this only for cross-org writes or
                                  # named-identity attribution.
+# permissions-required:         # optional: abstract read/write capability requirements imported
+#   read: true                  # components can declare without naming a consumer's service
+#   write: true                 # connections; see docs/imports.md#permissions-required
 supply-chain:                  # optional internal supply-chain mirror (see docs/supply-chain.md)
   feed:                          # mirror binaries (compiler, AWF, ado-script) from an ADO Artifacts feed
     name: my-project/my-feed     # feed name or project/feed; scalar `feed: my-feed` shorthand also works