RAIFFAContract reference

CONTRACT REFERENCE · TEST_ONLY

LOCAL SIMULATION · TEST_ONLYLocal validation surfaces and fixed fixtures only · no real login, organizational authority, operational API, external execution, or authority issuance

EligibilityGateRef reference

PÓLYA receives only the required reference; sensitive actor and condition details stay inside RAIFFA. This page lists the transmitted fields and the checks required before use.

01

Fields in the transmitted reference

TEST_ONLY sample shapejson
{
  "schemaVersion": "EligibilityGateRef.v1",
  "classification": "TEST_ONLY",
  "eligibilityGateRef": "egref_v1_…",
  "gateRevision": 1,
  "bindingDigest": "bnd_v1_…",
  "issuedAt": "2026-08-09T09:00:00.000Z",
  "expiresAt": "2026-08-09T09:30:00.000Z",
  "revocationState": "ACTIVE",
  "consumerMode": "REFERENCE_ONLY",
  "actionAuthority": "NONE"
}
02

Do not expose these values to PÓLYA

bindingDigest provides a coordinate for internal exact binding. It is not a payload from which the consumer can reconstruct actor or condition content.

  • Decision Case body and node content
  • Actor identity and session detail
  • Exact scope and condition detail
  • Human approval content and policy body
  • Secrets, signing keys, and internal audit payload
03

Recheck the reference at use time

  • schemaVersion and classification
  • gateRevision and bindingDigest
  • issuedAt and expiresAt
  • Current revocationState
  • Internal exact binding to expected actor, case, and scope
  • Replay claim and integrity