up

2025-11-24 07:52:25 +02:00
parent 5970f0d9bd
commit 150b3730ef
215 changed files with 8119 additions and 740 deletions
--- a/docs/modules/attestor/policies.md
+++ b/docs/modules/attestor/policies.md
@@ -0,0 +1,12 @@
+# Attestor Policies (DOCS-ATTEST-73-003)
+
+Guidance on verification policies applied by Attestor.
+
+- Scope: DSSE envelope validation, subject hash matching, optional transparency checks.
+- Policy fields:
+  - allowed issuers / key IDs
+  - required predicates (e.g., `stella.ops/vexObservation@v1`)
+  - transparency requirements (allow/require/skip)
+  - freshness window for attestations
+- Determinism: policies must be pure; no external lookups in sealed mode.
+- Versioning: include `policyVersion` and hash; store alongside attestation records.