{"policy":{"version":1,"network":"testnet","mode":"simulated","treasury":"simulated","signers":{"agent":"simulated","proposer":null,"threshold":"simulated"},"largeThresholdTinybars":50000000,"check":{"via":"simulated","priceUsdc":"0.01","spendCapUsdc":"0.10","decidedBy":"deterministic checker","payTo":"0.0.0"},"payees":{"count":5,"enforce":true,"source":"demo registry"},"verdict":{"zeroG":"not configured","requireVerdict":false,"allowNo0G":false},"worldGate":{"requiredForLarge":true,"environment":"production","approvalTtlMinutes":5,"singleUse":true},"transferSource":"request","challenge":{"windowSeconds":0,"recheckAtExecution":true},"auth":{"enabled":false},"rules":["Sign only the Scheduled Transaction read back from Hedera, never a transfer supplied with the request.","Refuse when payee, amount or token differ from the description. The deterministic checker decides; no model is in the decision path.","Refuse a schedule that pays out of any account other than the council treasury, or that is deleted or already executed.","Pay for every check over x402 under a spending cap, and never pay above the configured price.","Pay only a 402 offer whose payTo is the registered check service wallet; the 402 response is untrusted. A swapped payTo is refused before anything is paid.","Refuse a recipient whose entry in the council payee registry (demo registry, 5 entries) is revoked, expired or not yet valid. A recipient not in the registry is refused, unless a standing instruction is in force: then it is a new recipient and goes to a council vote (or is refused if the instruction says so).","Fail closed: with no 0G verdict (call failed, or no key in real mode) the agent refuses. In simulated mode without a key the verdict is a labelled template.","Every decision entry anchors the proposal hash, the 0G request id and model, a hash of the verdict plus the proposal hash, and the payee registry result.","With no standing instruction covering it, a large proposal needs a fresh World ID approval for that exact proposal: single use, 5 minutes, verified on the server.","A standing instruction is the owner's plain-language rules, compiled into fixed rules by 0G and adopted by a majority vote of the council; its rulesHash is logged. Inside it, a payment of any size is signed with no vote and no per-payment World ID check. Outside it, the payment waits for a council vote: a majority of the World-ID-verified seats that existed when the vote opened, each ballot a proof bound to the exact payment and choice. After a passing vote the payment is re-checked before signing, with no second check fee.","Council admission: one seat per World ID nullifier. The first seat founds the council; every later seat needs a single-use invite from a current seat holder, valid 24 hours and void once the inviter's seat is revoked.","A seat holder may leave the council at once. Removing another seat takes a council vote: a majority of the other seats. A revocation bumps the epoch, blocks that person from rejoining, cancels every pending proposal and closes every open vote.","Log every decision to the HCS audit topic as a hash-chained entry that commits to this policy."]},"hash":"6367eb6ac9678df66ab34dceb78b69a56d0c5a647f92c2f8d3411effcb3872eb","auth":"open (demo)","note":"Every HCS audit entry carries this hash.","mandate":null}