{
  "schema": "hm.agent-drift.policy-packs.v1",
  "ruleset": "2026-07-21.1",
  "updatedAt": "2026-07-21",
  "purpose": "Observable release-review conditions for normalized H/M Agent Scope and Agent Risk Atlas comparisons.",
  "decisionVocabulary": ["review-required", "change-observed", "no-observed-drift"],
  "prohibitedInterpretations": ["safe", "certified", "approved", "complete threat coverage"],
  "policies": [
    {
      "id": "no-new-critical-paths",
      "defaultEnabled": true,
      "violatedWhen": "The candidate activates one or more critical attack paths absent from the baseline.",
      "evidenceUnit": "new critical path"
    },
    {
      "id": "no-sensitive-authority-expansion",
      "defaultEnabled": true,
      "violatedWhen": "The candidate declares one or more newly added sensitive capabilities.",
      "evidenceUnit": "added sensitive capability"
    },
    {
      "id": "no-control-removal",
      "defaultEnabled": true,
      "violatedWhen": "A control declared in the baseline is absent from the candidate.",
      "evidenceUnit": "removed declared control"
    },
    {
      "id": "no-coverage-regression",
      "defaultEnabled": true,
      "violatedWhen": "An attack path active in both releases has weaker declared control coverage in the candidate.",
      "evidenceUnit": "coverage regression"
    },
    {
      "id": "no-isolation-growth",
      "defaultEnabled": true,
      "violatedWhen": "Comparable Agent Scope inputs show more candidate tools gated as deny-until-isolated.",
      "notEvaluableWhen": "Either input does not provide Agent Scope aggregate gate counts.",
      "evidenceUnit": "additional isolation-gated tool"
    },
    {
      "id": "same-measurement-method",
      "defaultEnabled": false,
      "violatedWhen": "The source schema or normalization method differs between baseline and candidate.",
      "evidenceUnit": "measurement-method change"
    }
  ],
  "privacy": {
    "sourceReportsIncluded": false,
    "sourcePayloadsIncluded": false,
    "sourceFileNamesIncluded": false,
    "toolNamesIncluded": false,
    "sourceDataUploaded": false,
    "toolExecutionPerformed": false,
    "syntheticActivityPresentedAsReal": false
  },
  "limitations": {
    "runtimeObserved": false,
    "controlsVerified": false,
    "sourceIntegrityVerified": false,
    "deploymentIdentityVerified": false,
    "securityVerdictProduced": false,
    "completenessGuaranteed": false
  }
}