{
  "version": "0.1",
  "domain": "agent-policy.com",
  "role": "local_permissions_and_behavioral_constraints",
  "purpose": "Declare what a validated agent may do in this execution context.",
  "upstream": {
    "identity": "https://agentpassports.org/.well-known/agent-passport.json",
    "trust": "https://agent-trust.org/.well-known/trust-resolver.json"
  },
  "policy_model": {
    "default": "deny_unless_allowed",
    "evaluation_order": [
      "identity",
      "trust",
      "policy",
      "execution"
    ],
    "decision_classes": [
      "allow",
      "review",
      "deny"
    ]
  },
  "surfaces": {
    "constraints": "https://agent-policy.com/.well-known/policy-constraints.json",
    "actions": "https://agent-policy.com/.well-known/policy-actions.json",
    "revocations": "https://agent-policy.com/.well-known/policy-revocations.json"
  },
  "status": "bootstrap",
  "updated_at": "2026-05-17"
}