# Examples

## Add a domain

User: "Add a finance domain with restricted prod curated read for month-end; revisit after SSO."

Actions:

1. `platformctl decision add --applies-to domains.finance --rationale "Month-end needs prod curated read; revisit after SSO" --expires 2026-10-01`
2. Add domain to `intent.yaml` with `access_profile: restricted` and override linked to that decision id.
3. `platformctl validate && platformctl plan`
4. Wait for approval → `platformctl apply`

## Resume partial intake

User: "SSO is ready with Okta now."

Actions: set `identity.sso: okta` via wizard resume or direct intent edit → validate → plan → apply.