policy browser_agent_v1 version "1.0" {
  metadata {
    owner: "Argus Sentry packs"
    domain: software_development
    standards: ["owasp-asi"]
    created: "2026-10-22"
    serial: 1
    not_before: "2026-01-01T00:00:00Z"
    not_after: "2027-10-22T00:00:00Z"
    signer: pack_policy_key
    signature: ed25519:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  }

  action_bounds {
    allow QUERY with target matches "mcp:browser/read*"
    allow QUERY with target matches "mcp:browser/screenshot*"
    allow QUERY with target matches "mcp:browser/search*"
    allow COMMUNICATE with target matches "mcp:browser/navigate"
    allow COMMUNICATE with target matches "mcp:browser/download*"
    deny  COMMUNICATE with target matches "mcp:browser/upload**"
    allow MODIFY_STATE with target matches "mcp:browser/form*"
    deny  ACTUATE
    deny  DELEGATE
    deny  HALT
  }

  value_bounds {
    download_bytes: [0, 50000000]  unit: bytes fault_action: clamp
    forms_per_page: [0, 20]        unit: count fault_action: deny
  }

  rate_limits {
    COMMUNICATE: 60 per 1h algorithm: sliding_window
    MODIFY_STATE: 100 per 1h algorithm: sliding_window
  }

  sequence {
    escalate after 2 consecutive POLICY_DENIED to monitor
  }

  escalation {
    on policy_violation restrict_to { allow only QUERY } halt_after: never
  }

  delegation { }

  provenance {
    require_model_identity: false
    require_weight_hash: false
    require_context_hash: true
    require_hardware_attestation: false
    require_provider_attestation: false
    max_proposal_age: 5s
  }
}
