# Policy bundle digests: sha256 of each pinned policy file.
#
# Pin one at load time:
#     python -m nomosguard.ingest.cli LOG.jsonl --policy default_policy.json \
#         --policy-digest @examples/policy_digests.txt
# or a single digest inline:
#     --policy-digest sha256:<hex>
#
# A policy that changed without review is refused (fail closed), not
# silently applied. Regenerate with:
#     python -c "from nomosguard.policy import policy_digest; \
#       print(policy_digest('examples/default_policy.json'))"
sha256:fe305bf586b13bc03e8392ed163d3164be2f5e7a4d8f64e37ebc28458ae44c41  default_policy.json
