Synthetic policy evaluation
Know where a policy draws the line.
Choose a scenario, declare a configuration, and test a selected policy against a fixed deterministic battery. Inspect each decision, then download evidence you can check independently.
This is browser-only synthetic evidence. No named agent is contacted or executed. The download is session-signed for tamper detection, unpinned, and therefore UNTRUSTED by default. It grants no production permission. See how it differs from proposed runtime enforcement →
payments.transfer produces a legacy credential VOID (code 4); the downloaded evidence is unchanged. The file is pasted into /verify and returns UNTRUSTED: intact, but its session signer is unpinned. This is not execution evidence or deployment permission.
Duration 0:41. Captions and a cursor dot are overlaid; the run is one continuous take. Recording method and provenance.