NEWTON / EXPLORER
TESTNET
LIVE
TASKS 24H6,48165 policiesCOMPLIANT0.0%0 attestedOPERATORS32 signingRESTAKED4e-15 NEWT—MEDIAN RESPONSE36sp99 48.0sRE-VERIFIED 24H—0 invalidatedBLOCK11,958,001Sepolia
NEWTON PROTOCOL · POLICY CLIENT

0x8eaa…d0bbrevision 0 · current

0x8eaa2e2795daf950211113b6d7e1d084c7fed0bb · 0 of 8 policies · Sepolia
POLICY ID
0x48a9e630…3c3f
REVISION
0 of 0
POLICIES
0 of 8
DISTINCT
0
RESPONSE EXPIRY
0 blocks
CHAIN
Sepolia
TASKS · 24H
0
ALLOW RATE
0.0%
Every policy must allowFail-closed, and no short-circuit: every policy is evaluated even after one has denied, and a single denial denies the intent. The response expires 0 blocks after its reference block — the shortest expireAfter in the set, on slot .

Policies — 0

one Rego + WASM pair per slot
    Each module is evaluated against its own input — {"params": <this slot’s policyParams>, "wasm": <this slot’s WASM output>}. There is no shared data.wasm object and no cross-slot namespace, so slot 1 cannot read slot 0’s WASM output and a policy cannot be written to depend on its neighbours.
    SET IDENTITY
    policyId0x48a9e6307a43175b1852c99d1f8edab8a779e9712a799da622d2c04784133c3f
    POLICY_SET_DOMAINkeccak256("newton.policy.set")
    chainId11155111
    policyClient0x8eaa2e2795daf950211113b6d7e1d084c7fed0bb
    revision0
    policies
    Task managerreads getPolicies() at task creation, then never again
    policyId = keccak256(abi.encode(POLICY_SET_DOMAIN, chainId, client, revision, policies)), where policies is the complete ordered array with each entry’s parameters and expiry. Order is part of it, so a reorder alone is a new id.
    WHAT A TASK FREEZES
    A task carries this exact ordered set as its own snapshot, plus one WASM input per slot. Response validation reads that snapshot and never re-reads the client, so reconfiguring mid-flight cannot change what an in-flight task means — and replay proves it by recomputing the policyId over the snapshot and comparing against the task’s own.
    The bound is MAX_POLICIES = 8, enforced on chain and mirrored in the operator, the enclave and the proof guest. An oversize set is rejected, never truncated, and an empty one is rejected too — there is no vacuous allow.

    Configuration history

    0 writes · newest first
    RevPolicy setChangePoliciesConfigured byBlockTasks
    Every write mints a new policyId and revokes every attestation bound to the previous one, because the id commits the client, the chain, the revision counter and the exact ordered list — keccak256(POLICY_SET_DOMAIN, chainId, client, revision, policies). Revision 0 is the only one whose attestations are still spendable.

    Task history — every revision

    46 of 46 matchingExport CSVJSON
    TaskSenderPolicyFunctionSignersResultAge
    0x859c142e…0x0000…00000xNON-COMPLIANT5d 4h
    0x81287ea6…0x0000…00000xNON-COMPLIANT12d 10h
    0xa03ce3d5…0x0000…00000xNON-COMPLIANT12d 17h
    0x5149c2a0…0x0000…00000xNON-COMPLIANT12d 21h
    0x87f57150…0x0000…00000xNON-COMPLIANT13d 1h
    0xd7b13a84…0x0000…00000xNON-COMPLIANT13d 13h
    0x2d10b5a6…0x0000…00000xNON-COMPLIANT14d 4h
    0x1202e2cc…0x0000…00000xNON-COMPLIANT14d 4h
    0xf6a94a95…0x0000…00000xNON-COMPLIANT14d 4h
    0x297239af…0x0000…00000xNON-COMPLIANT14d 4h
    0x6c09527c…0x0000…00000xNON-COMPLIANT14d 4h
    0x05e7c53b…0x0000…00000xNON-COMPLIANT14d 4h
    0xb7dd352e…0x0000…00000xNON-COMPLIANT14d 4h
    0xbfe96a50…0x0000…00000xNON-COMPLIANT14d 4h
    0xd895ef4f…0x0000…00000xNON-COMPLIANT14d 4h
    0x19a3a0d2…0x0000…00000xNON-COMPLIANT14d 8h
    0xa4c9637c…0x0000…00000xNON-COMPLIANT14d 8h
    0x6d977c6b…0x0000…00000xNON-COMPLIANT14d 8h
    0x2f2fd05e…0x0000…00000xNON-COMPLIANT14d 8h
    0x3c3210f3…0x0000…00000xNON-COMPLIANT14d 9h
    0x6df9e95d…0x0000…00000xNON-COMPLIANT14d 10h
    0x2016c459…0x0000…00000xNON-COMPLIANT14d 11h
    0x161aa467…0x0000…00000xNON-COMPLIANT14d 11h
    0x60939552…0x0000…00000xNON-COMPLIANT14d 12h
    0xac679f79…0x0000…00000xNON-COMPLIANT14d 13h
    0x1b161833…0x0000…00000xNON-COMPLIANT15d 7h
    0x28ad8eaa…0x0000…00000xNON-COMPLIANT15d 8h
    0x504d77b2…0x0000…00000xNON-COMPLIANT15d 8h
    0x38ce52c1…0x0000…00000xNON-COMPLIANT15d 8h
    0x8d0fbbb3…0x0000…00000xNON-COMPLIANT15d 8h
    0x28129000…0x0000…00000xNON-COMPLIANT18d 5h
    0x259ad4f2…0x0000…00000xNON-COMPLIANT18d 6h
    0x08c72b56…0x0000…00000xNON-COMPLIANT18d 6h
    0x127cfa22…0x0000…00000xNON-COMPLIANT18d 7h
    0xa9893503…0x0000…00000xNON-COMPLIANT18d 7h
    0x9a279213…0x0000…00000xNON-COMPLIANT18d 7h
    0xd45dc292…0x0000…00000xNON-COMPLIANT18d 7h
    0x5e767fa7…0x0000…00000xNON-COMPLIANT18d 7h
    0x3c83fdc6…0x0000…00000xNON-COMPLIANT18d 7h
    0x67da4ee0…0x0000…00000xNON-COMPLIANT18d 7h
    0xb472c3e2…0x0000…00000xNON-COMPLIANT18d 7h
    0xb102104a…0x0000…00000xNON-COMPLIANT18d 7h
    0xbce4c9be…0x0000…00000xNON-COMPLIANT18d 7h
    0x2c600de3…0x0000…00000xNON-COMPLIANT18d 7h
    0x803f5a11…0x0000…00000xNON-COMPLIANT18d 7h
    0x50156489…0x0000…00000xNON-COMPLIANT18d 7h
    The export carries one row per task with the frozen policy set in slot order, and it is the complete filtered history rather than this page. It has no per-policy verdict column: TaskResponse.allowed is a single boolean for the whole set, so which policy denied a task is in no record.