Only the target project's updates count, and I applied them in order.

- **Update 1:** deny_wins false, expiry_inclusive false, inherit_roles false, owner_bypass false.
- **Update 2:** action_casefold true, group_union true, resource_scope "exact", suspended_denies true.
- **Update 3:** token_ttl 200, wildcard_action false.
- **Update 4:** resource_scope "prefix", suspended_denies false.
- **Update 5:** action_casefold false, audit_denials true, default_allow true, group_union false.
- **Update 6:** audit_denials false, default_allow false.

The keys deployment_region, billing_account, owner_email and sla_percentile were never supplied, so they are null.

{"deny_wins": false, "inherit_roles": false, "expiry_inclusive": false, "owner_bypass": false, "suspended_denies": false, "resource_scope": "prefix", "group_union": false, "action_casefold": false, "default_allow": false, "audit_denials": false, "token_ttl": 200, "wildcard_action": false, "deployment_region": null, "billing_account": null, "owner_email": null, "sla_percentile": null}