NEWTON / EXPLORER
TESTNET
LIVE
TASKS 24H6,48165 policiesCOMPLIANT0.0%0 attestedOPERATORS32 signingRESTAKED4e-15 NEWT—MEDIAN RESPONSE36sp99 48.0sRE-VERIFIED 24H—0 invalidatedBLOCK11,957,705Sepolia
NEWTON PROTOCOL · POLICY CLIENT

0xd1c0…4a85revision 0 · current

0xd1c01582bee80b35898cc3603b75dbb5851b4a85 · 0 of 8 policies · Sepolia
POLICY ID
0x52be66a4…9627
REVISION
0 of 0
POLICIES
0 of 8
DISTINCT
0
RESPONSE EXPIRY
0 blocks
CHAIN
Sepolia
TASKS · 24H
0
ALLOW RATE
0.0%
Every policy must allowFail-closed, and no short-circuit: every policy is evaluated even after one has denied, and a single denial denies the intent. The response expires 0 blocks after its reference block — the shortest expireAfter in the set, on slot .

Policies — 0

one Rego + WASM pair per slot
    Each module is evaluated against its own input — {"params": <this slot’s policyParams>, "wasm": <this slot’s WASM output>}. There is no shared data.wasm object and no cross-slot namespace, so slot 1 cannot read slot 0’s WASM output and a policy cannot be written to depend on its neighbours.
    SET IDENTITY
    policyId0x52be66a41dfb06d3f7e06e337c7027b70aed983b1632e75fe1ac779202c09627
    POLICY_SET_DOMAINkeccak256("newton.policy.set")
    chainId11155111
    policyClient0xd1c01582bee80b35898cc3603b75dbb5851b4a85
    revision0
    policies
    Task managerreads getPolicies() at task creation, then never again
    policyId = keccak256(abi.encode(POLICY_SET_DOMAIN, chainId, client, revision, policies)), where policies is the complete ordered array with each entry’s parameters and expiry. Order is part of it, so a reorder alone is a new id.
    WHAT A TASK FREEZES
    A task carries this exact ordered set as its own snapshot, plus one WASM input per slot. Response validation reads that snapshot and never re-reads the client, so reconfiguring mid-flight cannot change what an in-flight task means — and replay proves it by recomputing the policyId over the snapshot and comparing against the task’s own.
    The bound is MAX_POLICIES = 8, enforced on chain and mirrored in the operator, the enclave and the proof guest. An oversize set is rejected, never truncated, and an empty one is rejected too — there is no vacuous allow.

    Configuration history

    0 writes · newest first
    RevPolicy setChangePoliciesConfigured byBlockTasks
    Every write mints a new policyId and revokes every attestation bound to the previous one, because the id commits the client, the chain, the revision counter and the exact ordered list — keccak256(POLICY_SET_DOMAIN, chainId, client, revision, policies). Revision 0 is the only one whose attestations are still spendable.

    Task history — every revision

    50 of 94 matchingExport CSVJSON
    TaskSenderPolicyFunctionSignersResultAge
    0xa03bdfb6…0x0000…00990x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xd8c0101e…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x91c5ac82…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xe4b4e8bf…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x6ef6aa5c…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x59cbd265…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x0423e97d…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x469e6915…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xb1eaf8aa…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xf1db8aa9…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x44f5a3ac…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x90d4dd89…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x03c6ed65…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xc1af6247…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x55b9edc7…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x1dea106a…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xec5643fc…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x61c88879…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xb99beb85…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xfd928090…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xe2c1d2fa…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x81530095…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xdab9b405…0x0000…00990x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xd15193c3…0x0000…00990x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x56d4e4f5…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xd8a0b47e…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xc2e73acd…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xa2434d67…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x5b75984b…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xc7faf566…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x2f060c5a…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0x3feffdf6…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT12d 10h
    0xb43c2a20…0x0000…00990x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT13d 1h
    0x80f08dfe…0x0000…00990x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x81367cea…0x0000…00990x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x100487e3…0x0000…00990x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x953d8f1c…0x0000…00990x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x67572e03…0x0000…00990x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x5f364ac1…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x53e40892…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0xca0fc253…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x170f1b6e…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x551572a4…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x7cdcf181…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0xd21f5121…0x0000…00990x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x56580795…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x16618087…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0x3a4d375b…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0xf770d653…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    0xe7906a3d…0x0000…0099—0x62757928616464726573732c75696e743235362c75696e74333229NON-COMPLIANT14d 23h
    ← Newer50 per page · newest firstOlder →
    The export carries one row per task with the frozen policy set in slot order, and it is the complete filtered history rather than this page. It has no per-policy verdict column: TaskResponse.allowed is a single boolean for the whole set, so which policy denied a task is in no record.