Pushed the reference impl public: GitHub - zexoverz/confidential-agent-policy-verdicts: Reference implementation of the draft ERC Confidential Agent Policy Verdicts — pre-execution ZK allow/deny for autonomous agent actions against a committed secret policy. · GitHub
Both things we settled above are in it. Action-binding is a canonical `PolicyAction` preimage (domain-separated by chainId + domainId) that the guarded contract and the proving program hash the same way, so the guard stays minimal. Executor is bound by signature now instead of positionally direct submit works, or a relayer submits with an EIP-712 sig from the executor, verified through SignatureChecker so ERC-1271 accounts work too. The nullifier already makes the sig single-use so I didn’t add a separate nonce.
ERC-165 id is `0x6c832e88`. Spec Test Cases are in there as a Foundry suite, 18/18, CI green. Poke holes in it — issues/PRs welcome.