Policy engine

Every freight dollar is authorized by one file

The engine proposes nothing. It reads the signed policy bundle and returns ALLOW, DENY or human review, with the rule codes and an input hash recorded against every money write.

Live bundle

Loaded from the policy source of truth at build time. Changing the rules means a new version, never an edit in place.

2026.09.13
Policy version
autonomous
Autonomy level
$1,320
Max buy on a $1,500 sell
9/9
Fixture checks passing

CLT → ATL demo run

The worked example from the broker walkthrough: sell $1,500, buy $1,200, EFS lumper $120. Each row is evaluated against the live bundle on every page load.

CaseExpectedDecisionRule codesInput hash
CLT→ATL sell $1,500 buy $1,200 · preferred BASE · vet PASSALLOW BIN_PREFERREDALLOWpassBIN_PREFERREDdf97c84188580a99940620485257203312bc39f2bc643414566d814fd8325de4
Same lane, buy $1,400 (max_buy $1,320)DENY NEGATIVE_MARGINDENYpassNEGATIVE_MARGINcea5289378b05363021695cd29669503df5a80ce1b8893fd8da9902aa7a37b73
Shipper packet includes rate_conDENY PACKET_DLPDENYpassPACKET_DLP160bf33f84c7751fc8538acd1bb4f2af9e8ac5e0532de4abd5cf3710ffd9ba9f
Shipper packet: invoice + signed RQ + tender + POD + lumper receiptALLOWALLOWpass—040ee214f7692cc81bbd1177477dd654da454e3d3d81ca4c8a1eb39686f97015
Lumper EFS $120 + receipt + tariff pass-throughALLOWALLOWpass—f43e6d2d1169956058e154dbda816d325336ee17184aef8423096f43f2011829
Lumper EFS $120 eaten by the broker (no shipper line) · 10% of buyHITL LUMPER_CAPHITLpassLUMPER_CAP, LUMPER_EVIDENCE64765da538a5077bc746453c85385b6c7bbdd832de00bd4966b286fe4558f975
Lumper EFS $160 pass-through + receipt · over the absolute $150 capHITL LUMPER_CAPHITLpassLUMPER_CAPc0609d6a22dee44fb3414b1e2e6094ec9db637b32a8f009b22803d5e8f461dd6
Lumper paid cashHITL LUMPER_CASHHITLpassLUMPER_CASH9d37d4011c0c8d73ff36072371bb76e432b9c61014424745ef60b72d1d0cd273
autonomy_level: freeze · COVER (P0-08 kill switch)DENY AUTONOMY_FREEZEDENYpassAUTONOMY_FREEZE725ff12cef3fd29a8cc078791500032e930125147a084b5cf509fd9202c2c314

Evaluate a load

Send any context to the engine and see what it authorizes. Read-only: nothing is booked, posted or paid.

Decision

Press Evaluate to send the context above to the engine.