{
  "schema": "hsimc.stateless-eperson-policy.v0.1",
  "principle": "PERSISTENT_ADDRESS_STATELESS_AUTHORITY_COMPUTED_EXECUTION",
  "eperson_id": "STABLE_ADDRESSABLE_IDENTIFIER",
  "not_persisted_as_trusted_current_state": [
    "ROLE",
    "AUTHORITY",
    "LIFECYCLE",
    "HUMAN_SUPERVISOR",
    "MODEL_BINDING",
    "EXECUTION_PERMISSION"
  ],
  "resolve_every_action_from": [
    "CURRENT_REALITY_REFS",
    "CURRENT_WORK",
    "CURRENT_AUTHORITY_REFS",
    "CURRENT_LIFECYCLE_EVENTS",
    "CURRENT_HUMAN_SUPERVISOR_REFS",
    "CURRENT_MODEL_CAPABILITY_REFS"
  ],
  "role_views": [
    "TRUSTEE",
    "AI_WORKER",
    "AI_EMPLOYEE",
    "TASK_SPECIALIST",
    "CUSTOM_WORK_ROLE"
  ],
  "rule": "Role views may change or disappear immediately when current Reality/Authority changes. A prior session never preserves execution permission.",
  "privacy": "HSIMC stores addressable references, Work, evidence and accounting state; it is not the private personal-information manager for third-party humans.",
  "email_alias": {
    "state": "POLICY_DEFINED_ALIAS_NOT_PROVISIONED_IN_C0",
    "purpose": "HSIMC_ID_BILLING_NOTIFICATION_ROLE_ROUTING_ONLY",
    "private_personal_information_management": false,
    "authority_proof": false,
    "private_mailbox": false,
    "namespace_policy": "<eperson-id-or-approved-alias>@hsimc.tech",
    "delivery_state": "NOT_PROVISIONED_IN_C0",
    "allowed_purposes": [
      "EPERSON_ID_ALIAS",
      "HSIMC_ACCOUNTING_REFERENCE",
      "NOTIFICATION_ROUTING",
      "HSIMC_ROLE_ROUTING"
    ],
    "prohibited_purposes": [
      "PRIVATE_PERSONAL_MAILBOX",
      "PERSONAL_SOCIAL_PROFILE",
      "KYC_STORE",
      "AUTHORITY_PROOF"
    ]
  },
  "mcp_execution_rule": "Any executable action must resolve current Work-scoped Authority and capability at action time. Resource discovery/read does not grant execution.",
  "privacy_federation": {
    "private_profile_system_of_record": "SUBJECT_OR_AUTHORIZED_THIRD_PARTY",
    "hsimc_default_storage": "OPAQUE_REFERENCE_PLUS_WORK_EVIDENCE_AUTHORITY_ACCOUNTING_STATE",
    "principle": "DO_NOT_CENTRALIZE_PRIVATE_PERSONAL_STATE_MERELY_TO_RUN_EPERSON"
  },
  "enforcement_state": "CONTRACT_DEFINED_FOR_REALITY_REGISTRY_AND_EPERSON_PATH",
  "legacy_execution_migration": "NOT_COMPLETE",
  "global_rule_target": "ALL_EPERSON_EXECUTABLE_ACTIONS_MUST_EVENTUALLY_RESOLVE_STATELESS_EXECUTION_ENVELOPE"
}