curl --request POST \
  --url https://api.getovra.com/policies/simulate \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "agentId": "<string>",
  "amount": 1,
  "merchant": "<string>"
}
'

{
  "allowed": true,
  "requiresApproval": true,
  "reason": "<string>"
}