# Policy bundle digests: sha256 of each pinned policy file.
#
# Pin one at load time:
#     python -m nomosguard.ingest.cli LOG.jsonl --policy default_policy.json \
#         --policy-digest @examples/policy_digests.txt
# or a single digest inline:
#     --policy-digest sha256:<hex>
#
# A policy that changed without review is refused (fail closed), not
# silently applied. Regenerate with:
#     python -c "from nomosguard.policy import policy_digest; \
#       print(policy_digest('examples/default_policy.json'))"
sha256:ac85c200ed68054941cc81d41646a6ee6da6e6e098b338ed4a27567c9c202879  default_policy.json
