NEWTON / EXPLORER
MAINNET
LIVE
TASKS 24H08 policiesCOMPLIANT0.0%0 attestedOPERATORS22 signingRESTAKED4e-15 NEWT—MEDIAN RESPONSE——RE-VERIFIED 24H—0 invalidatedBLOCK26,237,104Ethereum
NEWTON PROTOCOL · POLICY CLIENT

0x8189…9773revision 0 · current

0x8189c7ea178ceff7d5f39aa8bd83ae46e3789773 · 0 of 8 policies · Ethereum
POLICY ID
0xcb19566b…0bf2
REVISION
0 of 0
POLICIES
0 of 8
DISTINCT
0
RESPONSE EXPIRY
0 blocks
CHAIN
Ethereum
TASKS · 24H
0
ALLOW RATE
0.0%
Every policy must allowFail-closed, and no short-circuit: every policy is evaluated even after one has denied, and a single denial denies the intent. The response expires 0 blocks after its reference block — the shortest expireAfter in the set, on slot .

Policies — 0

one Rego + WASM pair per slot
    Each module is evaluated against its own input — {"params": <this slot’s policyParams>, "wasm": <this slot’s WASM output>}. There is no shared data.wasm object and no cross-slot namespace, so slot 1 cannot read slot 0’s WASM output and a policy cannot be written to depend on its neighbours.
    SET IDENTITY
    policyId0xcb19566b03c28675bf9ff9a45f290a09500b3bdec4401e5ddd9dd1746c200bf2
    POLICY_SET_DOMAINkeccak256("newton.policy.set")
    chainId1
    policyClient0x8189c7ea178ceff7d5f39aa8bd83ae46e3789773
    revision0
    policies
    Task managerreads getPolicies() at task creation, then never again
    policyId = keccak256(abi.encode(POLICY_SET_DOMAIN, chainId, client, revision, policies)), where policies is the complete ordered array with each entry’s parameters and expiry. Order is part of it, so a reorder alone is a new id.
    WHAT A TASK FREEZES
    A task carries this exact ordered set as its own snapshot, plus one WASM input per slot. Response validation reads that snapshot and never re-reads the client, so reconfiguring mid-flight cannot change what an in-flight task means — and replay proves it by recomputing the policyId over the snapshot and comparing against the task’s own.
    The bound is MAX_POLICIES = 8, enforced on chain and mirrored in the operator, the enclave and the proof guest. An oversize set is rejected, never truncated, and an empty one is rejected too — there is no vacuous allow.

    Configuration history

    0 writes · newest first
    RevPolicy setChangePoliciesConfigured byBlockTasks
    Every write mints a new policyId and revokes every attestation bound to the previous one, because the id commits the client, the chain, the revision counter and the exact ordered list — keccak256(POLICY_SET_DOMAIN, chainId, client, revision, policies). Revision 0 is the only one whose attestations are still spendable.

    Task history — every revision

    27 of 27 matchingExport CSVJSON
    TaskSenderPolicyFunctionSignersResultAge
    0xd2b1b57c…0xac14…6ba1—0x726563656976652829NON-COMPLIANT123d 6h
    0xa237d3ee…0xac14…6ba1—0x726563656976652829NON-COMPLIANT123d 6h
    0xd7ec6660…0xac14…6ba10x726563656976652829NON-COMPLIANT124d 1h
    0x46ef95df…0xac14…6ba10x726563656976652829NON-COMPLIANT124d 1h
    0xc7a93b15…0xac14…6ba10x726563656976652829NON-COMPLIANT124d 1h
    0x3240eaf8…0xac14…6ba10x726563656976652829NON-COMPLIANT124d 1h
    0xa418ba09…0xac14…6ba10x726563656976652829NON-COMPLIANT124d 1h
    0x59c03308…0xac14…6ba10x726563656976652829NON-COMPLIANT124d 1h
    0xa1563251…0xac14…6ba10x726563656976652829NON-COMPLIANT124d 1h
    0x87a9688a…0xac14…6ba10x726563656976652829NON-COMPLIANT124d 1h
    0x34d4e995…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0x34de4afa…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0xbe0f8d37…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0xb71637cb…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0xb22d0f9c…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0xb49e56c4…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0xd50cbc12…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0xd00412bf…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0xf8562481…0xac14…6ba10x726563656976652829NON-COMPLIANT124d 1h
    0xa162fff4…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0xc236feed…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0x7635f9f7…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0xf1911835…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0xcefcb3fe…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0x72811e52…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0x8e0810ce…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    0x9711248f…0xac14…6ba1—0x726563656976652829NON-COMPLIANT124d 1h
    The export carries one row per task with the frozen policy set in slot order, and it is the complete filtered history rather than this page. It has no per-policy verdict column: TaskResponse.allowed is a single boolean for the whole set, so which policy denied a task is in no record.