Policy

The rules a warrant enforces — content-addressed and bound on-chain.

A policy is a JSON document of rules evaluated before any action. Store it with warden policy add <file> — it's content-addressed (its hash is pinned and signed into the warrant), and the blob lives on Walrus.

Sign-rules (web3)

Govern transactions: chain allowlists, spend thresholds, and recipient / function / package matching. Within threshold → signed in-process; over threshold → held for owner sign-off.

Manual approval (web2)

Gateway rules can mark routes or requests manual_approval — those are held for the owner's sign-off before the request is forwarded.