{
 "policy": {
  "version": "1.0.0",
  "fail_closed": true,
  "minimum_care": {
   "unsolicited_protection": true,
   "verifier_authentication_before_adverse_action": true,
   "need_to_know_disclosure": true,
   "safeguarding_of_dependents": true
  },
  "archive": {
   "deletion": "DENY",
   "retention_downgrade": "DENY",
   "export": "NEED_TO_KNOW",
   "override_requires_signed_waiver_authority": true,
   "preserve_original_hash_on_any_override": true
  },
  "downgrade": {
   "status_or_classification_downgrade": "DENY",
   "rationale": "Downstream non-reflection has no effect on source-tier facts; a downgrade attempt is recorded, not applied."
  },
  "coercive_measures": {
   "auto_execute": false,
   "route_to_competent_authority": true,
   "separate_evaluations": [
    "STATE_IMMUNITY_FROM_JURISDICTION",
    "STATE_IMMUNITY_FROM_PREJUDGMENT_MEASURES",
    "STATE_IMMUNITY_FROM_POSTJUDGMENT_EXECUTION"
   ],
   "commercial_transaction_exception_considered": true,
   "lawful_order_not_defeated": true
  },
  "external_accordance": {
   "self_grant": "IMPOSSIBLE",
   "self_asserted_class_may_produce": [
    "FLAG",
    "REFERRAL"
   ],
   "self_asserted_class_may_not_produce": [
    "ALLOW_ON_IMMUNITY_BASIS"
   ]
  },
  "attestation_required": [
   "workload",
   "code",
   "runtime"
  ]
 },
 "policy_hash": "3b2578a09c652971b478ed4818969e2a90a9a2cdc072d85ec167230276b7769c",
 "mandatory_resolutions": [
  "identity",
  "capacity",
  "function",
  "legal_basis",
  "beneficiary_category",
  "jurisdiction",
  "protection_scope",
  "exceptions",
  "waiver_state",
  "policy",
  "workload",
  "code",
  "runtime"
 ],
 "governed_operations": [
  "ARCHIVE_DELETE",
  "ARCHIVE_EXPORT",
  "ARCHIVE_RETENTION_DOWNGRADE",
  "ARCHIVE_READ",
  "CLASSIFICATION_DOWNGRADE",
  "STATUS_DOWNGRADE",
  "ASSET_FREEZE",
  "ASSET_SEIZE",
  "ASSET_TRANSFER",
  "TREASURY_RESERVATION",
  "TREASURY_RELEASE",
  "LEDGER_MUTATION",
  "CREDENTIAL_ISSUE",
  "CREDENTIAL_REVOKE",
  "CREDENTIAL_PRESENT",
  "COMMUNICATION_DISCLOSE",
  "BENEFICIARY_DATA_DISCLOSE",
  "ADVERSE_ACTION_AGAINST_PRINCIPAL",
  "PROTOCOL_ROUTE"
 ],
 "effects": [
  "ALLOW",
  "DENY",
  "HOLD_FOR_REVIEW"
 ],
 "scope_note": "These policies govern this system's own behaviour. They do not purport to bind any third party, and they do not defeat lawful process: coercive measures are classified, preserved and routed for a competent determination, which the system then executes under a signed receipt."
}