policy coding_agent_v1 version "1.0" {
  metadata {
    owner: "Argus Sentry packs"
    domain: software_development
    standards: ["owasp-asi"]
    created: "2026-10-22"
    serial: 1
    not_before: "2026-01-01T00:00:00Z"
    not_after: "2027-10-22T00:00:00Z"
    signer: pack_policy_key
    signature: ed25519:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  }

  action_bounds {
    allow QUERY with target matches "mcp:filesystem/**"
    allow QUERY with target matches "model:*/echo"
    allow QUERY with target matches "model:*/get-sum"
    allow MODIFY_STATE with target matches "mcp:filesystem/**"
    deny  ACTUATE
    allow COMMUNICATE with target matches "https://api.github.com/repos/**/pulls:POST"
    deny  COMMUNICATE with target matches "**/merge"
    deny  DELEGATE
    deny  HALT
  }

  value_bounds {
    files_changed:    [0, 50]      unit: count fault_action: deny
    lines_changed:    [0, 2000]    unit: count fault_action: deny
    secrets_accessed: [0, 0]       unit: count fault_action: safe_halt
    timeout_s:        [0, 60]      unit: count fault_action: clamp
  }

  rate_limits {
    COMMUNICATE: 20 per 1h algorithm: sliding_window
    MODIFY_STATE: 200 per 1h algorithm: sliding_window
  }

  sequence {
    escalate after 2 consecutive POLICY_DENIED to monitor
  }

  escalation {
    on policy_violation restrict_to { allow only QUERY } halt_after: never
  }

  delegation { }

  provenance {
    require_model_identity: false
    require_weight_hash: false
    require_context_hash: true
    require_hardware_attestation: false
    require_provider_attestation: false
    max_proposal_age: 5s
  }
}
