Write Your First Policy

npm install @parmanasystems/core @parmanasystems/governance
npm install -g @parmanasystems/verifier-cli
# or use npx throughout this guide

npx parmana workspace init my-workspace
cd my-workspace

my-workspace/
  policies/
    payment-approval/
      1.0.0/
        policy.json      ← edit this
  examples/
    approve.json
    reject.json

{
  "policyId":      "payment-approval",
  "policyVersion": "1.0.0",
  "schemaVersion": "1.0.0",
  "signalsSchema": {
    "amount":   { "type": "integer" },
    "verified": { "type": "boolean" }
  },
  "rules": [
    {
      "id": "block-unverified",
      "condition": { "signal": "verified", "equals": false },
      "outcome": {
        "action": "reject",
        "requires_override": false,
        "reason": "Payment source not verified."
      }
    },
    {
      "id": "approve-standard",
      "condition": { "signal": "amount", "less_than": 10000 },
      "outcome": {
        "action": "approve",
        "requires_override": false,
        "reason": "Amount within standard limit."
      }
    },
    {
      "id": "flag-large",
      "condition": { "all": [] },
      "outcome": {
        "action": "manual_review",
        "requires_override": true,
        "reason": "Large payment requires manual review."
      }
    }
  ]
}

npx parmana policy compile ./policies/payment-approval/1.0.0

✅ Phase 1 - File exists
✅ Phase 2 - Valid JSON
✅ Phase 3 - Required fields
✅ Phase 4 - Directory name matches policyId
✅ Phase 5 - Schema version supported
✅ Phase 6 - Signals schema valid
✅ Phase 7 - Rules valid
✅ Phase 8 - Catch-all present

✅ Policy is valid

npx parmana policy build ./policies/payment-approval/1.0.0

npx parmana verify bundle ./policies/payment-approval/1.0.0

import crypto from "crypto";
import {
  executeFromSignals,
  verifyAttestation,
  LocalSigner,
  LocalVerifier,
  MemoryReplayStore,
} from "@parmanasystems/core";

async function main() {
  const { privateKey, publicKey } = crypto.generateKeyPairSync("ed25519", {
    privateKeyEncoding: { type: "pkcs8", format: "pem" },
    publicKeyEncoding:  { type: "spki",  format: "pem" },
  });

  const attestation = await executeFromSignals(
    {
      policyId:      "payment-approval",
      policyVersion: "1.0.0",
      signals:       { amount: 500, verified: true },
    },
    new LocalSigner(privateKey),
    new LocalVerifier(publicKey),
    undefined,           // use default runtime paths (policies/ at project root)
    new MemoryReplayStore()
  );

  console.log(attestation.decision);
  // { action: "approve", requires_override: false, reason: "Amount within standard limit." }

  const result = verifyAttestation(attestation, new LocalVerifier(publicKey));
  console.log(result.valid); // true
}

main().catch(console.error);