NEWTON / EXPLORER
MAINNET
LIVE
TASKS 24H08 policiesCOMPLIANT0.0%0 attestedOPERATORS22 signingRESTAKED2k NEWT—MEDIAN RESPONSE——RE-VERIFIED 24H—0 invalidatedBLOCK26,236,220Ethereum
NEWTON PROTOCOL · POLICY CLIENT

0x4e3d…2880revision 0 · current

0x4e3d7190a6c7b572b8f7fe5b4e8b952dfa962880 · 0 of 8 policies · Ethereum
POLICY ID
0x875c9001…cd12
REVISION
0 of 0
POLICIES
0 of 8
DISTINCT
0
RESPONSE EXPIRY
0 blocks
CHAIN
Ethereum
TASKS · 24H
0
ALLOW RATE
0.0%
Every policy must allowFail-closed, and no short-circuit: every policy is evaluated even after one has denied, and a single denial denies the intent. The response expires 0 blocks after its reference block — the shortest expireAfter in the set, on slot .

Policies — 0

one Rego + WASM pair per slot
    Each module is evaluated against its own input — {"params": <this slot’s policyParams>, "wasm": <this slot’s WASM output>}. There is no shared data.wasm object and no cross-slot namespace, so slot 1 cannot read slot 0’s WASM output and a policy cannot be written to depend on its neighbours.
    SET IDENTITY
    policyId0x875c9001ea9d68022b0b21bf1974dcfa521d37fed901a0bbf380b9b0f20acd12
    POLICY_SET_DOMAINkeccak256("newton.policy.set")
    chainId1
    policyClient0x4e3d7190a6c7b572b8f7fe5b4e8b952dfa962880
    revision0
    policies
    Task managerreads getPolicies() at task creation, then never again
    policyId = keccak256(abi.encode(POLICY_SET_DOMAIN, chainId, client, revision, policies)), where policies is the complete ordered array with each entry’s parameters and expiry. Order is part of it, so a reorder alone is a new id.
    WHAT A TASK FREEZES
    A task carries this exact ordered set as its own snapshot, plus one WASM input per slot. Response validation reads that snapshot and never re-reads the client, so reconfiguring mid-flight cannot change what an in-flight task means — and replay proves it by recomputing the policyId over the snapshot and comparing against the task’s own.
    The bound is MAX_POLICIES = 8, enforced on chain and mirrored in the operator, the enclave and the proof guest. An oversize set is rejected, never truncated, and an empty one is rejected too — there is no vacuous allow.

    Configuration history

    0 writes · newest first
    RevPolicy setChangePoliciesConfigured byBlockTasks
    Every write mints a new policyId and revokes every attestation bound to the previous one, because the id commits the client, the chain, the revision counter and the exact ordered list — keccak256(POLICY_SET_DOMAIN, chainId, client, revision, policies). Revision 0 is the only one whose attestations are still spendable.

    Task history — every revision

    50 of 1,428 matchingExport CSVJSON
    TaskSenderPolicyFunctionSignersResultAge
    0xc9e4a84b…0xf39f…22660xNON-COMPLIANT25d 21h
    0x9a32814b…0xf39f…22660xNON-COMPLIANT25d 22h
    0xe0cd888c…0xf39f…22660xNON-COMPLIANT25d 23h
    0x1ebd3a57…0xf39f…22660xNON-COMPLIANT26d 0h
    0x73246328…0xf39f…22660xNON-COMPLIANT26d 1h
    0x9fd60585…0xf39f…22660xNON-COMPLIANT26d 2h
    0x4ae1145d…0xf39f…22660xNON-COMPLIANT26d 3h
    0x3187e525…0xf39f…22660xNON-COMPLIANT26d 4h
    0xc52dde7e…0xf39f…22660xNON-COMPLIANT26d 5h
    0x35d91fc3…0xf39f…22660xNON-COMPLIANT26d 6h
    0xb6b02cad…0xf39f…22660xNON-COMPLIANT26d 7h
    0xabf4dd42…0xf39f…22660xNON-COMPLIANT26d 8h
    0x401a6b0d…0xf39f…22660xNON-COMPLIANT26d 9h
    0x895e3eb6…0xf39f…22660xNON-COMPLIANT26d 10h
    0xc57c777a…0xf39f…22660xNON-COMPLIANT26d 11h
    0x5b7138aa…0xf39f…22660xNON-COMPLIANT26d 12h
    0x3b1679a1…0xf39f…22660xNON-COMPLIANT26d 13h
    0x44ac668d…0xf39f…22660xNON-COMPLIANT26d 14h
    0x4f9febff…0xf39f…22660xNON-COMPLIANT26d 15h
    0xdc3ff6bc…0xf39f…22660xNON-COMPLIANT26d 16h
    0x20362d32…0xf39f…22660xNON-COMPLIANT26d 17h
    0x4d3ff187…0xf39f…22660xNON-COMPLIANT26d 18h
    0x96944072…0xf39f…22660xNON-COMPLIANT26d 19h
    0x5b3bdc78…0xf39f…22660xNON-COMPLIANT26d 20h
    0x05e2f570…0xf39f…22660xNON-COMPLIANT26d 21h
    0xf84a2f97…0xf39f…22660xNON-COMPLIANT26d 22h
    0x30f33d88…0xf39f…22660xNON-COMPLIANT26d 23h
    0x0e905a1e…0xf39f…22660xNON-COMPLIANT27d 0h
    0xe18c7775…0xf39f…22660xNON-COMPLIANT27d 1h
    0x9325bd3c…0xf39f…22660xNON-COMPLIANT27d 2h
    0xa2ff8a62…0xf39f…22660xNON-COMPLIANT27d 3h
    0xef17c8c4…0xf39f…22660xNON-COMPLIANT27d 4h
    0xfebdee1f…0xf39f…22660xNON-COMPLIANT27d 5h
    0x98f2c082…0xf39f…22660xNON-COMPLIANT27d 6h
    0x912e20c2…0xf39f…22660xNON-COMPLIANT27d 7h
    0xb86b378c…0xf39f…22660xNON-COMPLIANT27d 8h
    0x7166a027…0xf39f…22660xNON-COMPLIANT27d 9h
    0xfe3ad6e3…0xf39f…22660xNON-COMPLIANT27d 10h
    0x4c83381d…0xf39f…22660xNON-COMPLIANT27d 11h
    0xa87bb991…0xf39f…22660xNON-COMPLIANT27d 12h
    0x7c799bfe…0xf39f…22660xNON-COMPLIANT27d 13h
    0x6f76f86e…0xf39f…22660xNON-COMPLIANT27d 14h
    0xb03f9f75…0xf39f…22660xNON-COMPLIANT27d 15h
    0x6f23fe91…0xf39f…22660xNON-COMPLIANT27d 16h
    0xef059cf1…0xf39f…22660xNON-COMPLIANT27d 17h
    0x338e3de0…0xf39f…22660xNON-COMPLIANT27d 18h
    0xb6598cc7…0xf39f…22660xNON-COMPLIANT27d 19h
    0x181cdeb9…0xf39f…22660xNON-COMPLIANT27d 20h
    0x913caa24…0xf39f…22660xNON-COMPLIANT27d 21h
    0x6b646293…0xf39f…22660xNON-COMPLIANT27d 22h
    ← Newer50 per page · newest firstOlder →
    The export carries one row per task with the frozen policy set in slot order, and it is the complete filtered history rather than this page. It has no per-policy verdict column: TaskResponse.allowed is a single boolean for the whole set, so which policy denied a task is in no record.