rules_version = '2'; service cloud.firestore { match /databases/{database}/documents { match /verifications/{docId} { allow read: if true; allow write: if false; } } }