Policies

Set default rules for trusted, risky, unknown, and revoked agent traffic.

Policy rules

Few defaults, clear modes, resource-style rows.

RuleConditionModeStatus

Unknown traffic

Missing passport, expired scope, bad origin, or replay risk

Deny

Low-risk forms

Active passport + matching route + fresh nonce

Allow

Money and account changes

Checkout, refunds, account update, or vendor write

Pause

Revoked passports

Any revoked or paused agent stops before the action runs

Stop