Required for durable refresh tokens (Auth0 Token Vault).
| Tier | Examples | Verification |
|---|---|---|
| non-sensitive | openid, email, profile | Light — branding + consent screen |
| sensitive | Calendar, Sheets | Standard review — verified brand, privacy policy, homepage, domain ownership, justification, maybe demo video |
| restricted | Gmail-read, full Drive | Off-limits — adds a paid third-party security assessment. Blocked by this gateway. |
a0.gg brand (name, logo, support email).a0.gg describing the service.a0.gg with a Google API Services Limited Use disclosure.a0.gg.The backing a0.gg website is a separate project; build prompt in the repo
under docs/prompts/.